CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

PT-2026-62082

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A remote attacker can obtain sensitive information through the x-ai-provider component. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2026-50755

CVE-2026-50755 affects DayuanJiang’s next-ai-draw-io 0.4.13. The issue enables an attacker to obtain sensitive information by manipulating the X-Forwarded-For header, leading to potential information disclosure. The publicly provided details describe the vulnerability as a remote-access risk with...

CVE-2026-50755

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...

PT-2026-83239

Name of the Vulnerable Software and Affected Versions Bifrost versions prior to 1.5.17 Description Bifrost is an enterprise AI gateway for routing requests to model providers. A Server-Side Request Forgery SSRF issue exists because the isPublicIP function in core/providers/utils/fetch.go...

PT-2026-62084

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code. This is achieved by manipulating the mcp parameter. Recommendations At the moment, there is no...

CVE-2026-50756

CVE-2026-50756 affects DayuanJiang’s DayuanJiang next-ai-draw-io v0.4.13, with the vulnerability residing in the x-ai-provider component. The included metrics indicate a network-accessible issue with high impact on confidentiality (C:H) but no integrity or availability impact, and no user interac...

PT-2026-62073

Name of the Vulnerable Software and Affected Versions bytebot-ai affected versions not specified Description An issue allows attackers to execute arbitrary code by providing a crafted path to the computer write file function. Recommendations At the moment, there is no information about a newer...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

PT-2026-62081

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A remote attacker can obtain sensitive information by manipulating the X-Forwarded-For header value. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-50757

DayuanJiang’s DayuanJiang next-ai-draw-io 0.4.13 contains a Directory Traversal vulnerability that allows a remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server. Affected component: next-ai-draw-io (version 0.4.13). Root cause: directory traversal in the mcp-server componen...

RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - aom (Important) (RHSA-2026:42875)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42875 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

@mcpjam/inspector (>=2.22.0, <=2.39.0) potentially affected by CVE-2026-64650 via @ai-sdk/harness-codex (1.0.0-canary.9)

@ai-sdk/harness-codex NPM version 1.0.0-canary.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ai-sdk/harness-codex and may be impacted: - @mcpjam/inspector =2.22.0, =2.39.0 Source cves: CVE-2026-64650 Source advisory:...

CVE-2026-58481

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, AgentRuntime promises scoped file access under a configured sandbox basePath, but its path containment checks use raw string prefix tests. A sandbox base such as /tmp/network-ai-sandbox also matches a sibling pa...

CVE-2026-46701

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an empty secret process.env'NETWORKAIMCPSECRET' ?? '' at bin/mcp-server.ts:89, which causes isAuthorized lib/mcp-transport-sse.ts:254 to return true unconditionally for every reques...

CVE-2026-58484 Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.listBackups reads each backup's manifest.json and trusts the manifest's path field. EnvironmentManager.pruneBackups later passes that trusted entry.path directly to rmSyncentry.path, recursive...

CVE-2026-58482 Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called ApprovalInbox lib/approval-inbox.ts. It is the network surface of the human-in-the-loop Approval Gate, which ApprovalGate uses to require explicit human approval for high-risk operations...

CVE-2026-46701

Summary (markdown): Network-AI’s MCP SSE server defaults to an empty secret prior to v5.4.5, causing _isAuthorized to return true for all requests and enabling unauthenticated cross-origin tool calls. The server also unconditionally sets Access-Control-Allow-Origin: *, allowing browser contexts t...