14244 matches found
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the application's model-provider or cloud-storage account. The server forwards the reference to the model provider, which fetches it using the server's own credentials, allowing the clien...
GHSA-H7P7-W5GC-XJ3W Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the application's model-provider or cloud-storage account. The server forwards the reference to the model provider, which fetches it using the server's own credentials, allowing the clien...
CVE-2025-52640
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
CVE-2025-52640
CVE-2025-52640 – AION: The vulnerability affects HCL AION where the shared storage used by product components is architected with insufficient access separation. As a result, processes sharing the storage may access or modify files beyond their intended scope, potentially causing unintended behav...
CVE-2025-52640 HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
EUVD-2025-210722
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
CVE-2026-3835
The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token validation in the getadvancefilebyurl method in all versions up to, and including, 2.8.8.8 The method uses a SQL LIKE operator for token looku...
EUVD-2026-57720
The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token validation in the getadvancefilebyurl method in all versions up to, and including, 2.8.8.8 The method uses a SQL LIKE operator for token looku...
EUVD-2026-57695
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...
PT-2026-71625
rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules...
PT-2026-71516
Subscriber Path Traversal in Do Lasso = 358 versions...
PT-2026-71819
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
CVE-2026-66898
A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploi...
CVE-2026-62812
Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-56603
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
EUVD-2026-56601
Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...
GHSA-QVV7-CG9C-W4X3 vulnerabilities
Vulnerabilities for packages: open-webui...
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-71556
A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...