fence-agents security update

An update is available for fence-agents. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fence-agents packages provide a collection of scripts for handling...

fence-agents security update

An update is available for fence-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fence-agents packages provide a collection of scripts for handling...

RLSA-2026:49927 Moderate: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: urllib3: urllib3: Information disclosure via cross-origin redirects...

The Vulnerability with No CVE: Managing Persistent Gaps between Mandate and Authority in AI Coding Agents

Existing guidance identifies excessive agency, excessive permission, weak task-bound authorization, and inadequate agent controls as important risks. Control frameworks also describe capabilities for constraining, authorizing, observing, validating, and responding to agent activity. Yet security...

PT-2026-68680

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.3 Description An insecure direct object reference exists in the mongodb memory, elasticsearch memory, and mem0 memory tools. Remote authenticated users can access, modify, or delete memories...

CVE-2026-19111: Authorization Bypass Through User-Controlled Key

Insecure direct object reference in the mongodbmemory, elasticsearchmemory, and mem0memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other tenants by influencing the LLM to emit tool calls with a...

MiracleLinux 8 : fence-agents-4.2.1-129.el8_10.27 (AXSA:2026-1468:14)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1468:14 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description bloc...

RHEL 8 : fence-agents (RHSA-2026:51045)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51045 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

PT-2026-68412

Name of the Vulnerable Software and Affected Versions mf-yang openclaw-cn versions prior to 0.2.2 Description A remote attack is possible in the apply patch Tool component due to an issue in the assertNoSymlinkEscape function within the src/agents/sandbox-paths.ts file. This flaw allows for link...

CVE-2026-19006: Incorrect Authorization

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

RockyLinux 8 : fence-agents (RLSA-2026:49927)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49927 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...

RockyLinux 9 : fence-agents (RLSA-2026:50317)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50317 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description block...

MiracleLinux 8 : fence-agents-4.2.1-129.el8_10.26 (AXBA:2026-1430:12)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-1430:12 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description bloc...

RHEL 8 : fence-agents (RHSA-2026:51157)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51157 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

RHEL 8 : fence-agents (RHSA-2026:51152)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51152 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

kontext-cli v1.0.1

Website | Documentation | Dashboard | Discord Kontext is an authorization platform for AI agents. It helps teams control what agents can access and do with scoped credentials, policy enforcement, approvals, and audit trails. Kontext can run local-first for developer agents and extend to managed o...

CVE-2026-55522

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulnerable to code execution. Workflow.executeinclude implicitly imports and runs an included recipe's tools.py via a raw...

pentest-ai-agents v3.4.0

pentest-ai-agents 50 Claude Code subagents for penetration testing. Quick Start | Cheatsheet | Coverage | Agents | Examples Table of Contents What's New in v3.3 What's New in v3.2 Agent Map What's New in v3.1 Quick Start Cheatsheet Coverage Agents Tier 1 vs Tier 2 Examples Running Tools in a...

EUVD-2026-53569

In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied to classes resolved via a fallback path in the Remoting deserialization implementation, allowing agent processes, cod...

Shadow AI, Rogue Agents, and Data Leaks: A Special Report on Navigating AI Risk

Discover top enterprise AI risks — from shadow AI to rogue agents and data leaks — plus practical CISO strategies in the new Akamai SOTI special report...