CVE-2026-58481

creationtimestamp| type| source ---|---|--- 2026-07-20 18:47:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3xfozvk223...

CVE-2026-58481 Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, AgentRuntime promises scoped file access under a configured sandbox basePath, but its path containment checks use raw string prefix tests. A sandbox base such as /tmp/network-ai-sandbox also matches a sibling pa...

CVE-2025-58481

Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service...

CVE-2025-58481

creationtimestamp| type| source ---|---|--- 2025-12-02 02:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xx5ulrwo26...