cmcp

cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. id: CVE-2022-23397 info: name: Cedar Gate EZ-NET = 6.8.0 - Cross-Si...

scopeblind-gateway

protect-mcp Local policy enforcement and signed decision receipts for AI agent tool calls. Developer page · Quickstart · Agent setup · Policy packs · Sample record · Integrations · Documentation · Contribute Put the gateway between an MCP client and its tool server, or use its hooks in a coding...

CVE-2026-122193

OS command injection in the example SSM document provisioning script in Trusted Remote Execution REX before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to execute arbitrary commands as root on the managed instance, bypassing Ced...

EUVD-2026-118379

OS command injection in the example SSM document provisioning script in Trusted Remote Execution REX before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to execute arbitrary commands as root on the managed instance, bypassing Ced...

CVE-2026-122193

An OS command injection vulnerability exists in the example SSM document provisioning script within Trusted Remote Execution (REX) prior to 2026-07-28. An authenticated remote user authorized to invoke the Rex-RO or Rex-RW SSM documents may execute arbitrary commands as root on the managed instan...

PT-2026-138142

Name of the Vulnerable Software and Affected Versions AWS Trusted Remote Execution REX versions prior to 2026-07-28 Description An OS command injection exists in the example SSM document provisioning script. An authenticated remote user with permissions to invoke the 'Rex-RO' or 'Rex-RW' SSM...

Reparo: Synthesizing and Validating Access Control Policies

Writing correct access control policies for software applications is difficult because it requires expertise in the authorization language and a thorough understanding of the application's authorization requirements. Existing synthesis and mining approaches assume explicit authorization inputs an...

@auto-nomos/cedar (>=0.0.0, <=0.0.2), @auto-nomos/core (>=0.0.1, <=0.0.4) +10 more potentially affected by unknown CVE via @cedar-policy/cedar-wasm (>=4.3.3, <=4.11.0)

@cedar-policy/cedar-wasm NPM version =4.3.3, =0.0.0, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.14.0-alpha.0, =0.14.0-alpha.0, =0.19.0 - cedar-mcp-server 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-C33X-VCV4-VG3G...

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the is in scope condition. This advisory only affects JSON-formatted Cedar policy templates containing is in scope conditions that are malformed according to the...

GHSA-C33X-VCV4-VG3G Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the is in scope condition. This advisory only affects JSON-formatted Cedar policy templates containing is in scope conditions that are malformed according to the...

@auto-nomos/cedar (>=0.0.0, <=0.0.2), @auto-nomos/core (>=0.0.1, <=0.0.4) +10 more potentially affected by unknown CVE via @cedar-policy/cedar-wasm (>=4.3.3, <=4.11.0)

@cedar-policy/cedar-wasm NPM version =4.3.3, =0.0.0, =0.0.1, =0.0.7, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.14.0-alpha.0, =0.14.0-alpha.0, =0.19.0 - cedar-mcp-server 1.0.0 Source cves: unknown CVE Source advisory: GHSA-C33X-VCV4-VG3G...

PT-2026-140114

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the is in scope condition. This advisory only affects JSON-formatted Cedar policy templates containing is in scope conditions that are malformed according to the...

RAISE: Reinforcing Access Control Policy Synthesis in LLMs Via Symbolic Evaluation

Translating natural-language access-control requirements into policies requires careful reasoning about permissions, constraints, and exceptions, and even frontier LLMs often produce policies that violate the intended authorization semantics. We construct CedarInstruct, to our knowledge the first...

CLEANSTART-2026-LE78036 Security fix for GHSA-r6v5-fh4h-64xc applied in: cedar 4.11.2-r1, shadowsocks-rust 1.24.0-r0, ztunnel-fips 1.26.8-r1, ztunnel-fips 1.27.6-r0, ztunnel-fips 1.27.8-r3, ztunnel-fips 1.28.4-r0, ztunnel-fips 1.29.0-r0

GHSA-r6v5-fh4h-64xc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FU11492 Security fix for CVE-2026-25727 applied in: cedar 4.11.2-r1, ztunnel-fips 1.27.8-r4

CVE-2026-25727 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WE84407 Security fix for GHSA-7gcf-g7xr-8hxj applied in: cedar 4.11.2-r1

Security vulnerability affects the cedar package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101990

Security vulnerability affects the cedar package. This issue is resolved in later releases. See references for vulnerability details...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...

cmcp v0.4.0

cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...