PT-2026-42538

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.14 Description An authenticated internal user can create API keys with access to routes not permitted by their role. This occurs because the allowed routes field is stored during key generation without verifying ...

GHSA-2QJ5-GWG2-XWC4 OpenClaw: Unsanitized CWD path injection into LLM prompts

Overview OpenClaw embedded the current working directory workspace path into the agent system prompt without sanitization. If an attacker can cause OpenClaw to run inside a directory whose name contains control/format characters for example newlines or Unicode bidi/zero-width markers, those...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-27026 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-27026 Source advisory: OSV:GHSA-9MVC-8737-8J8H...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-27025 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-27025 Source advisory: OSV:GHSA-WGVP-VG3V-2XQ3...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-27024 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-27024 Source advisory: OSV:GHSA-996Q-PR4M-CVGQ...

UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors

A previously unknown threat actor tracked as UAT-9921 has been observed leveraging a new modular framework called VoidLink in its campaigns targeting the technology and financial services sectors, according to findings from Cisco Talos. "This threat actor seems to have been active since 2019,...

zeroclaw

🦀 ZeroClaw — Personal AI Assistant You own the agent. You ow...

raft-llm (>=0.1.1, <=0.1.6) potentially affected by CVE-2026-26013 via langchain-core (0.2.21)

langchain-core PYPI version 0.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - raft-llm =0.1.1, =0.1.6 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

langchain-runpod-llm (>=0.0.0, <=0.0.3) potentially affected by CVE-2026-26013 via langchain-core (0.1.18)

langchain-core PYPI version 0.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - langchain-runpod-llm =0.0.0, =0.0.3 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

atom-llm (0.1.0), cori-ai (>=0.0.0, <=1.2.12) +5 more potentially affected by CVE-2026-26013 via langchain-core (0.3.28)

langchain-core PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - atom-llm 0.1.0 - cori-ai =0.0.0, =0.7.22, =0.1.3, =0.1.2, =0.1.5 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W5...

process-gpt-llm-factory (1.0.1) potentially affected by CVE-2026-26013 via langchain-core (0.3.2)

langchain-core PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - process-gpt-llm-factory 1.0.1 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

chainlite (0.3.7), cryptocom-agent-client (>=1.0.0, <=1.0.4) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.33)

langchain-core PYPI version 0.3.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chainlite 0.3.7 - cryptocom-agent-client =1.0.0, =0.0.1, =0.3.0, =0.4.0 Source cves: CVE-2026-26013 Source advisory:...

elevendoc (>=0.1.3, <=1.2.4), llm-adaptive-router (>=0.1.0, <=0.1.12) potentially affected by CVE-2026-26013 via langchain-core (0.3.8)

langchain-core PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - elevendoc =0.1.3, =0.1.0, =0.1.12 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

I Can't Believe It's Not a Valid Exploit

Recently Large Language Models LLMs have been used in security vulnerability detection tasks including generating proof-of-concept PoC exploits. A PoC exploit is a program used to demonstrate how a vulnerability can be exploited. Several approaches suggest that supporting LLMs with additional...

azureml-evaluate-mlflow (>=0.0.57, <=0.0.58), eensight (>=1.0.0, <=1.0.2) +6 more potentially affected by CVE-2025-10279 via mlflow (2.12.2)

mlflow PYPI version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.57, =1.0.0, =0.8.0, =0.0.6, =0.6.0.dev0, =0.10.0, =0.10.2 Source cves: CVE-2025-10279 Source advisory:...

databricks-genai (>=1.2.0a0, <=1.2.0a6), deeptrees (>=1.6.0, <=1.8.2) +1 more potentially affected by CVE-2025-10279 via mlflow (2.18.0)

mlflow PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.2.0a0, =1.6.0, =0.15.1, =0.18.0 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXXR...

llm-foundry (0.11.0), modeva (>=1.0.14, <=2.1.0) potentially affected by CVE-2025-10279 via mlflow (2.15.1)

mlflow PYPI version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry 0.11.0 - modeva =1.0.14, =2.1.0 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXXR...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-10279 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXX...

databricks-genai (>=1.1.0, <=2.0.0a9), llm-foundry (>=0.12.0, <=0.14.5) +5 more potentially affected by CVE-2025-10279 via mlflow (2.16.2)

mlflow PYPI version 2.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - databricks-genai =1.1.0, =0.12.0, =0.0.3.post33, =0.0.16, =0.9.35rc0, =0.8.7, =0.8.8 Source cves: CVE-2025-10279 Source advisory:...

llm-foundry (>=0.9.1, <=0.10.0), mlflow-pytorch-exp (0.0.1) potentially affected by CVE-2025-10279 via mlflow (2.14.3)

mlflow PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry =0.9.1, =0.10.0 - mlflow-pytorch-exp 0.0.1 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXXR...