2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5099538)

2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5099538...

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5099535)

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems KB5099535...

2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5099535)

2026-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems KB5099535...

2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5099539)

2026-07 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5099539...

2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5099538)

2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5099538...

2026-07 .NET 8.0.29 Security Update for x86 Client (KB5104032)

2026-07 .NET 8.0.29 Security Update for x86 Client KB5104032...

Security Bulletin: Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Summary Langflow provides a visual interface for constructing and executing AI-powered agent workflows, exposing HTTP API endpoints for flow execution, file management, vector store operations, and Model Context Protocol MCP server configuration. An attacker could exploit insufficient validation...

July 14, 2026—KB5099414 (OS Build 22631.7376)

None None...

July 14, 2026—KB5099444 (Monthly Rollup)

None None...

July 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5100990)

None None...

July 14, 2026—KB5099538 (OS Build 17763.9020)

None None...

Description of the security update for Office 2016: July 14, 2026 (KB5002273)

None None...

PYSEC-2026-2721 Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

Summary Open WebUI has a Broken Object Level Authorization BOLA vulnerability in the builtin searchknowledgefiles tool. When native function calling is enabled and the selected model has no attached knowledge bases, an authenticated user can call searchknowledgefiles with an arbitrary knowledgeid...

PYSEC-2026-2750 Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

RAG ACL Bypass in Milvus Multitenancy Mode Summary This is a bypass of the fix for: - GHSA-h36f-rqpx-j5wx - CVE-2026-44560 - "Unauthorized File and Knowledge Base Content Access via RAG Vector Search" Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus...

PYSEC-2026-2566 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint

Summary Langflow is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker can exploit this flaw...

PYSEC-2026-2407 Bugsink: Issue event views can show an event from another project if its UUID is known

Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a logged-in user with access to one project can view anoth...

PYSEC-2026-2752 Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints

Cross-User File Access via Unchecked fileid in Folder Knowledge and Knowledge-Base Attach Endpoints Summary Multiple endpoints accept a user-supplied fileid and attach the referenced file to a resource the caller controls folder knowledge, knowledge-base contents without verifying that the caller...

PYSEC-2026-2699 Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

IDOR: Retrieval API Bypasses Knowledge Base Access Controls Author: Andrew Orr Summary validatecollectionaccess PR 22109 checks the user-memory- and file- collection name prefixes but does not check knowledge base collections, which use raw UUIDs as collection names. Any authenticated user who...

PYSEC-2026-2692 Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion

Summary Any authenticated user can permanently delete files owned by other users via DELETE /api/v1/files/id when the target file is referenced in any shared chat. The hasaccesstofile authorization gate unconditionally grants access through its shared-chat branch. It checks neither the requesting...

PYSEC-2026-2897 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries

Summary PraisonAI exposes optional SQL/CQL-backed knowledge-store implementations that build table and index identifiers from unvalidated name and collection arguments. Applications that pass untrusted collection names into these backends can trigger SQL or CQL injection. Details This issue affec...