EUVD-2026-106890

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGICLINKSECRET lets anyone forge valid magic link tokens. Unauthenticated attackers can log in as any email address, then...

CVE-2026-114087 Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGICLINKSECRET lets anyone forge valid magic link tokens. Unauthenticated attackers can log in as any email address, then...

CVE-2026-114087

Versions of Trigger.dev prior to 4.5.6 are vulnerable to an authentication bypass in self-hosted Docker Compose deployments. The root cause is the use of hardcoded default secrets from hosting/docker/.env.example, specifically a hardcoded MAGIC_LINK_SECRET . This flaw allows unauthenticated attac...

MSC-2026-13023

litellm 1.107.0 on PyPI is compromised: its wheels install a .pth file that runs a credential stealer at every Python interpreter startup, collecting SSH keys, cloud and CI/CD secrets, environment variables and LiteLLM database credentials, along with a sitecustomize.py loader that periodically...

PT-2026-120862

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker Docker Compose configuration file. The file contains the Uniform Resource Locator URL of the Splunk SOAR instance, the...

PT-2026-120213

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC LINK SECRET lets anyone forge valid magic link tokens. Unauthenticated attackers can log in as any email address, then...

SenseMind

一个以 AI 为核心的轻量级 SOC 平台，支持 Docker 一键部署。系统具备 AI 自学习闭环能力：针对 AI 确认但 soc.matched 标签未命中的攻击，自动提炼低误报 Suricata 规则并热加载至 local.rules 。通过持续积累检测规则，系统实现自我进化，显著提升对未知攻击的发现与拦截能力。...

GO-2026-6686 vulnerabilities

Vulnerabilities for packages: kubevirt-cdi-importer-fips, datadog-agent-fips, envoy-gateway-fips, xeol-fips, vcluster, k8s-image-swapper-fips, packer, cloudbeat-fips, gosu-fips, kubevirt-cdi-uploadserver-fips, k3s, neuvector, amazon-ecs-agent-fips, undock, containerd, k9s-fips, xeol, runc-fips,...

GO-2026-6686 vulnerabilities

Vulnerabilities for packages: datadog-agent, docker, xeol, k3d, runc, scorecard, dagger, k3s, neuvector-scanner, newrelic-infrastructure-agent, vcluster, gosu, ctop, zarf, act, undock, containerd...

Splunk SOAR authorization issue vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain an authorization issue vulnerability. This vulnerability stems from the failure to enforce editing permissions for the Automation Broker, allowing authenticated users lacking such privileges to download the Splunk SOAR Automation Broker Docker Compos...

CVE-2026-77933

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQLROOTPASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access...

CVE-2026-77933 DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQLROOTPASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access...

CVE-2026-77933 DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQLROOTPASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access...

CVE-2026-77933

DB-GPT through version 0.8.2 is vulnerable to a hardcoded credentials flaw within its default docker-compose.yml file. The configuration sets a static MYSQL_ROOT_PASSWORD and exposes port 3306 on all network interfaces. An attacker who can reach port 3306 or the shared dbgptnet network can authen...

EUVD-2026-104689

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQLROOTPASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access...

CVE-2026-77933 DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQLROOTPASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access...

CVE-2026-77933

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQLROOTPASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access...

CVE-2026-109441 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

CVE-2026-109441 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...

CVE-2026-109441 LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other...