Langroid has WAF Bypass Leading to RCE in TableChatAgent

Affected Scope langroid = 0.59.31 Vulnerability Description CVE-2025-46724 fix bypass: TableChatAgent can call pandaseval tool to evaluate the expression. There is a WAF in langroid/utils/pandasutils.py introduced to block code injection CVE-2025-46724. However it can be bypassed due to literalok...

The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers

Detecting whether a model has been poisoned is a longstanding problem in AI security. In this work, we present a practical scanner for identifying sleeper agent-style backdoors in causal language models. Our approach relies on two key findings: first, sleeper agents tend to memorize poisoning dat...

Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agents

Large language models LLMs have shown promise in assisting cybersecurity tasks, yet existing approaches struggle with automatic vulnerability discovery and exploitation due to limited interaction, weak execution grounding, and a lack of experience reuse. We propose Co-RedTeam, a security-aware...

CVE-2020-37047

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...

CVE-2020-37047

The CVE-2020-37047 case concerns Deep Instinct Windows Agent 1.2.29.0, where the DeepMgmtService has an unquoted service path at C:\Program Files\HP Sure Sense\DeepMgmtService.exe. The underlying issue is a local privilege escalation vulnerability that can allow a local user to execute code with ...

EUVD-2020-30971

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...

CVE-2020-37047 Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...

CVE-2020-37047 Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...

Toxic_Flow_Analysis_Framework_For_Agentic_AI

Toxic Flow Analysis TFA Framework A Secure-by-Design framew...

PT-2026-5577

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:Program FilesHP Sure SenseDeepMgmtService.exe to inject malicious...

Deep Instinct Windows Agent 代码问题漏洞

Deep Instinct Windows Agent is a terminal protection client software developed by Deep Instinct, Inc. In the version 1.2.29.0 of Deep Instinct Windows Agent, there is a code vulnerability. This vulnerability stems from the lack of quotation marks around the DeepMgmtService service path, which may...

CVE-2024-9432

Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data. The vulnerability could read Vertica agent plaintext apikey.This issue affects Vertica versions: 23.X, 24.X, 25.X...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: azure-service-operator, gatekeeper, crossplane-provider-aws-cloudformation, kube-logging-operator, kubelet-csr-approver, rancher-machine, jaeger, sftpgo-plugin-kms, mockgen, stakater-reloader, aws-flb-cloudwatch, cfssl, bento, kubeflow, xeol, dask-gateway,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: azure-service-operator, gatekeeper, crossplane-provider-aws-cloudformation, kube-logging-operator, kubelet-csr-approver, rancher-machine, jaeger, sftpgo-plugin-kms, mockgen, stakater-reloader, aws-flb-cloudwatch, cfssl, bento, kubeflow, xeol, dask-gateway,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, cluster-api-gcp-controller, azure-service-operator, dbmate, harbor-registry, gatekeeper, cloud-provider-vsphere, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, ytt, gobuster, osv-scanner, external-dns, ghaudit,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: azure-service-operator, gatekeeper, crossplane-provider-aws-cloudformation, kube-logging-operator, kubelet-csr-approver, rancher-machine, jaeger, sftpgo-plugin-kms, mockgen, stakater-reloader, aws-flb-cloudwatch, cfssl, bento, kubeflow, xeol, dask-gateway,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, nri-f5, cluster-api-gcp-controller, azure-service-operator, dbmate, harbor-registry, gatekeeper, cloud-provider-vsphere, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, ytt, gobuster, osv-scanner, external-dns,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: azure-service-operator, gatekeeper, crossplane-provider-aws-cloudformation, kube-logging-operator, kubelet-csr-approver, rancher-machine, jaeger, sftpgo-plugin-kms, mockgen, stakater-reloader, aws-flb-cloudwatch, cfssl, bento, kubeflow, xeol, dask-gateway,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, cluster-api-gcp-controller, azure-service-operator, dbmate, harbor-registry, gatekeeper, cloud-provider-vsphere, terraform-docs, crossplane-provider-aws-kinesis, kubeflow-katib, ytt, gobuster, osv-scanner, external-dns, ghaudit,...

CVE-2026-25046

Kimi Agent SDK is a set of libraries that expose the Kimi Code Kimi CLI agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to execSync as shell command strings. Prior to version 0.1.6, filenames containing shell metacharacters like $cmd could execute...