Tagged “cve.org”
CVEs tagged cve.org, newest first.
48202 CVEsRSS
CVE-2026-77926High· 8.8PoCAix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool
Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat inp…
CVE-2026-109395Critical· 9.1Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder
Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to app…
CVE-2026-105297High· 7.5Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
CVE-2026-77930Critical· 9.8PoCEvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested …
CVE-2026-109440High· 8.8PoCLangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCod…
CVE-2026-75128Critical· 9.8PoCLangchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request nam…
CVE-2026-109442Critical· 9.8PoCpiflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell
piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, w…
CVE-2026-77934High· 8.8PoCCoze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter wit…
CVE-2026-109443High· 8.8PoCJoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standa…
CVE-2026-109441Medium· 5.8PoCLangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code exe…
CVE-2026-77933Critical· 9.8PoCDB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet n…
CVE-2026-109444Critical· 9.8PoCOpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers ca…
CVE-2026-77937High· 8.1PoCLetta through 0.16.8 Cross-Tenant Impersonation via user_id Header
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_S…
CVE-2026-77935High· 8.3PoCCoze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID …
CVE-2026-77932Critical· 9.8PoCDB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated a…
CVE-2026-77938Medium· 6.5PoCLetta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools…
CVE-2026-77936Critical· 9.8PoCLetta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Re…
CVE-2026-28853High· 7.8The issue was addressed with improved checks
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.
CVE-2026-105298Medium· 6.3Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
CVE-2026-28854High· 7.5The issue was addressed with additional app bundle integrity checks
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.
CVE-2026-28850Medium· 5.5An authorization issue was addressed with improved state management
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-65356Medium· 5.5An access issue was addressed with improved access controls
An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65372Medium· 4.7A race condition was addressed with additional validation
A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.
CVE-2026-65379Medium· 5.5The issue was addressed with improved handling of secure input state
The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65396Medium· 5.5A buffer overflow was addressed with improved size validation
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-84508Medium· 5.5This issue was addressed with improved validation of the caller's access
This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.
CVE-2026-84490Low· 2.0This issue was addressed through improved state management
This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active.
CVE-2026-84547Low· 3.5A memory corruption issue was addressed with improved input validation
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.
CVE-2026-84582Medium· 5.5A privacy issue was addressed with improved access restrictions
A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-84613Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27…