PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal

PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal SummaryPraisonAI's Dynamic Context module provides filesystem-backed history andterminal-log storage. The SDK reference describes the module as providing:- artifact storage for tool...

adala (>=0.0.3, <=0.0.4), agent-actors (0.1.0) +42 more potentially affected by CVE-2026-10812 via gptcache (>=0.1.29.1, <=0.1.44)

gptcache PYPI version =0.1.29.1, =0.0.3, =0.0.5, =0.1.3, =0.28.9rc1, =0.13.0, =0.3.1, =0.1.48, =0.1.120a1, =0.1.120, =0.0.2, =0.5.17.post1, =0.6.0a2 and more Source cves: CVE-2026-10812 Source advisory: OSV:PYSEC-2026-3468...

agent-bom v0.97.4

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...

PT-2026-64035

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target run id in the request body without ownership verification. The AgentCRUD.create task and validate tas...

CVE-2026-6516: Improper Neutralization of Special Elements used in an OS Command

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API...

Zabbix Agent 2 Unauthorized Access

The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

OPENSUSE-SU-2026:11349-1 google-osconfig-agent-20260708.00-3.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20260708.00-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64120

Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agent file field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agent file field in...

Toward Cryptographically Verifiable Authorization for Autonomous AI Agents: A Security Hypothesis, Preliminary Formal Model, and Proof-Of-Concept Implementation

Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight. Existing authentication and authorization mechanisms establish identity and delegate authority, but do not inherently provide cryptographic evidence that a concrete...

OPENSUSE-SU-2026:11348-1 google-guest-agent-20260529.00-4.1 on GA media

These are all security issues fixed in the google-guest-agent-20260529.00-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64116

PraisonAI LinearBot processes unsigned webhooks when LINEAR WEBHOOK SECRET is missing Summary PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR WEBHOOK SECRET as optional. When the secret is absent, startup only logs a warning and handle webhook skips...

PT-2026-64137

PraisonAI AgentTeam.launch exposes unauthenticated remote agent invocation endpoints Summary PraisonAI's documented Python AgentTeam.launch / Agents.launch HTTP server starts externally reachable agent invocation endpoints without any authentication enforcement. The current implementation registe...

CVE-2026-65604: Improper Input Validation

Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent OPA deny-on-presence Rego policies. When a request body exceeds the configured maxBodyBytes limit, Skipper forwards the full payload to the upstream service while OPA evaluates against...

CVE-2026-47755: Authorization Bypass Through User-Controlled Key

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.05, low-privileged authenticated agent can retrieve plaintext credentials and TOTP secrets belonging to another client by directly requesting the credential edit modal wit...

PT-2026-63812

Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress = 1.0.16 versions...

google-osconfig-agent-20260708.00-2.1 on GA media (moderate)

google-osconfig-agent-20260708.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:11331-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7) +5881 more potentially affected by CVE-2026-59921 via io.netty:netty-codec-http (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-http MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-59921 Source advisory: SNYK:JAVA-IONETTY-18231070...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +6957 more potentially affected by CVE-2026-59901 via io.netty:netty-codec-compression (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =1.8.1 - ai.platon.gora:gora-core 1.0.0 - ai.platon.gora:gora-mongodb 1.0.0 and more Source cves: CVE-2026-59901 Source advisory: OSV:GHSA-558V-64GR-WGG4...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +6957 more potentially affected by CVE-2026-59901 via io.netty:netty-codec-compression (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-compression MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =1.8.1 - ai.platon.gora:gora-core 1.0.0 - ai.platon.gora:gora-mongodb 1.0.0 and more Source cves: CVE-2026-59901 Source advisory: GHSA-558V-64GR-WGG4...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7) +5881 more potentially affected by CVE-2026-59898 via io.netty:netty-codec-http (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-http MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-59898 Source advisory: OSV:GHSA-4MP9-239F-G9HG...