CVE-2026-85685

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

CVE-2026-85685 AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

EUVD-2026-71134

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

CVE-2026-85685 AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

CVE-2026-85685

AgentScope through 2.0.7.post1 is affected by a path traversal vulnerability in LocalWorkspace.add_skill . The skill_path request parameter is not confined, allowing an unauthenticated attacker over the network to supply an arbitrary directory path and copy files from any server location into the...

CVE-2026-85685 AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

CVE-2026-85508

A stack-based buffer overflow exists in FreeIPMI's ipmi-oem tool, in the Dell OEM handler for the get-system-info cmc-ipv6-info subcommand. The vulnerable function outputdellsysteminfocmcipv6info uses a 256-byte stack buffer but allows up to 65536 bytes of data to be copied from a BMC response...

BIT-JOOMLA-2026-73371 Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260808 - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items...

Malicious code in carbon-mac-copy-cloner (npm)

Source: amazon-inspector a38d75b9f18088f693edfe80cca42e9c3688457b43560fa568b6f547b9f464c5 The package carbon-mac-copy-cloner was found to contain malicious code. --- Credit: OpenSSF source...

PT-2026-85571

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skill path request parameter to copy files...

Flextype CMS 1.0.0-alpha.3 Path Traversal

Flextype CMS version 1.0.0-alpha.3 contains a path traversal vulnerability in the Entries copy functionality. An authenticated remote attacker can supply directory traversal sequences within both the source id and destination newid parameters submitted to /api/v1/entries/copy...

PT-2026-85730

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An out-of-bounds write exists in the tls append frag function within the Linux kernel. The issue occurs when tls push data fails to properly check for available space in an open record due t...

PT-2026-86189

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the netfs pgpriv2 copy to cache function where a folio is marked with PG private 2 before being appended to the copy-to-cache rolling buffer via netfs pgpriv2 copy...

CVE-2026-80898: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfs: clear PGprivate2 on copy-to-cache append failure netfspgpriv2copytocache marks the folio with PGprivate2 before netfspgpriv2copyfolio appends it to the copy-to-cache rolling buffer. If the append fails, the folio is not...

CVE-2026-85685: Improper Limitation of a Pathname to a Restricted Directory

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

kvm_vcpu_init_nested Heap Buffer Overflow DoS

The vulnerability of the kvmvcpuinitnested function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the tapgetuserxdp function within drivers/net/tap.c of the Linux kernel network device driver involves buffer copying without input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ethosu Gem Copy and Validate

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel USB device driver Heap Buffer Overflow DoS

The vulnerability in the buildi2cfwhdr function within the drivers/usb/serial/ioti.c file of the Linux kernel’s USB device driver is related to buffer copying without validating input data size. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...