CVE-2026-57141 PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function and withsandbox, while a regular-expression blocklist can be bypassed with Function'return this' to recover the glob...

EUVD-2026-78423

PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function and withsandbox, while a regular-expression blocklist can be bypassed with Function'return this' to recover the glob...

CVE-2026-57141 PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/builtins/code-mode.ts executes model-generated JavaScript with new Function and withsandbox, while a regular-expression blocklist can be bypassed with Function'return this' to recover the glob...

CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-47424

OpenAM (Open Access Management) Community Edition through 16.0.6 contains a Protection Mechanism Failure (CWE-693) in the GroovySandboxValueFilter component of its server-side scripting sandbox. An authenticated user with the ability to create or edit scripts in an executed context — such as a su...

EUVD-2026-78367

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

BIT-RCLONE-2026-88016 rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can plant a symlink in the destination and later directory metadata is applied through that path...

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560 , said...

CVE-2026-91751 Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

CVE-2026-79705: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not...

PT-2026-93128

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use-after-free issue exists in the WebAppInstalls component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to memo...

PT-2026-93130

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in Extensions on Mac allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. This is achieved throu...

PT-2026-93134

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use-after-free issue exists in the Auth component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacke...

PT-2026-93138

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An uninitialized resource in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms, allows a remote attacker to read memory outside the sandbox by...

PT-2026-93140

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use-after-free issue exists in the Input component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to crashes or...

PT-2026-93144

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.47 Description An out of bounds read exists in WebGL, which allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. An out of bounds read occurs when a...

PT-2026-93145

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Incorrect reference resolution in Extensions on Mac allows a local attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a local program. T...

PT-2026-93152

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Incorrect authorization in Core allows a local attacker to execute arbitrary code outside the sandbox via a local program on Windows. A sandbox is a security mechanism used to isolate...