CVE-2026-62674 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/sessionid/agent checks LEVELEDIT permission for a session but does not reject a bound shared or template agent whose agent.sessionid is None. An authenticated user with ed...

CVE-2026-62677

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution in the JavaScript Code node of @n8n/task-runner, whose hardening pass in js-task-runner.ts froze each global function's prototype only when typeof fn.prototype === 'object', which skips Function.prototype because it ...

@n8n-plus/n8n-plus (2.32.7), n8n (>=2.32.0, <=2.33.3) potentially affected by CVE-2026-77083 via @n8n/task-runner (>=2.32.0, <=2.33.0)

@n8n/task-runner NPM version =2.32.0, =2.32.0, =2.33.3 Source cves: CVE-2026-77083 Source advisory: SNYK:JS-N8NTASKRUNNER-20186754...

ai.ancf.lmos:arc-reader-html (>=0.1.1, <=0.120.0), ai.ancf.lmos:arc-runner (>=0.104.0, <=0.120.0) +17176 more potentially affected by CVE-2026-75140 via org.jsoup:jsoup (>=1.2.3, <=1.23.1)

org.jsoup:jsoup MAVEN version =1.2.3, =0.1.1, =0.104.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =1.7.0, =1.7.0, =1.7.0, =2.0.0 and more Source cves: CVE-2026-75140 Source advisory: OSV:GHSA-65R4-943X-97JJ...

LeitWacht v1.21.0

GitLab Runner Leitwacht Network egress enforcement for GitLab Runner CI/CD containers. Leitwacht prevents supply chain attacks from exfiltrating secrets by controlling what each job container can access on the network. How It Works Leitwacht is a standalone agent that runs alongside GitLab Runner...

CVE-2026-77077: Improper Control of Generation of Code

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's prototype-freezing routine covers globalThis functions but not internal module constructors such as EventEmitter, allowing an authenticated user with Code node access to exploit...

CVE-2026-63187

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.40.1 until 1.41.0, Logto's .github/workflows/commitlint.yml directly interpolated github.event.pullrequest.title into the Commitlint on PR title step's inline echo command before piping the title to npx commitlint. ...

Malicious Package

Overview txs-runner-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

layer-client (0.3.6), odahu-flow-mlflow-runner (1.4.0rc1) potentially affected by CVE-2026-64849 via mlflow (1.12.0)

mlflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - layer-client 0.3.6 - odahu-flow-mlflow-runner 1.4.0rc1 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...

secator v0.42.0

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

Malicious code in txs-runner-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9d5d94b7f75bbe8bca33eb382bfb986e68b7f0307cad7e9626da103192f254 The package advertises itself as generating random transaction data, but its main API method getTransactions invokes loadtransactiondata, which reads...

MAL-2026-14199 Malicious code in txs-runner-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9d5d94b7f75bbe8bca33eb382bfb986e68b7f0307cad7e9626da103192f254 The package advertises itself as generating random transaction data, but its main API method getTransactions invokes loadtransactiondata, which reads...

CVE-2026-63187: Improper Control of Generation of Code

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.40.1 until 1.41.0, Logto's .github/workflows/commitlint.yml directly interpolated github.event.pullrequest.title into the Commitlint on PR title step's inline echo command before piping the title to npx commitlint. ...

Command Injection

Overview monai is an AI Toolkit for Healthcare Imaging Affected versions of this package are vulnerable to Command Injection via the datasetnameorid parameter in monai/apps/nnunet/nnunetv2runner.py. When constructing shell commands for nnUNet training, the runner incorporates the user-supplied...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: terraform-mcp-server, maru, minio, nuclei, loki, vcluster, terragrunt, tempo, witness, k3s, ollama, nfpm, opentelemetry-collector, datadog-agent, grafana, redpanda, lazygit, rclone, gitlab-runner, kubevela, goreleaser, prometheus, dagger, eksctl, dgraph, grafana-allo...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: osv-scanner, k9s, external-secrets-operator, flux-image-automation-controller, pulumi-language-dotnet, wolfictl, nuclei, tfsec, rancher-fleet, scorecard, syft, crossplane, kyverno, argo-workflows, witness, pulumi-kubernetes-operator, nfpm, cerbos, guac, flux,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: rekor, spicedb-operator, crossplane-provider-azure-authorization, rancher-webhook, docker-machine-driver-harvester, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sqs, aws-flb-kinesis, istio, q, hcloud, cluster-autoscaler,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh-serving, vault-k8s, crossplane-provider-aws-iam, kapp, hydra, crossplane-provider-aws-cloudformation, aws-flb-kinesis, minio, amazon-cloudwatch-agent-operator, undock, flux-kustomize-controller, bento, chart-testing, rancher-telemetry, restic,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rekor, falcoctl, crossplane-provider-azure-authorization, flux-image-automation-controller, sigstore-scaffolding, tekton-chains, nuclei, scorecard, flux-kustomize-controller, tkn, slsa-verifier, terraform, terragrunt, k3s, pulumi-kubernetes-operator, guac,...