PT-2026-99570

Name of the Vulnerable Software and Affected Versions python-utcp pip package utcp-http versions prior to 1.1.12 Description The software fails to verify if tool URLs in a hand-written UTCP manual point to the agent's own loopback interface when the manual is retrieved from a remote, non-loopback...

PT-2026-99481

Name of the Vulnerable Software and Affected Versions heym versions prior to 0.0.105 Description Authenticated users can bypass Server-Side Request Forgery SSRF protections—a flaw where an attacker induces a server to make requests to an unintended location—due to a failure in applying egress...

CVE-2026-100626

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

CVE-2026-100626

Versions of capgo through 12.128.2 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the PUT /app/:appId endpoint. The root cause is that the endpoint accepts attacker-controlled icon storage paths . This allows authenticated users to provide arbitrary paths in the pri...

CVE-2026-100626 capgo through 12.128.2 IDOR via PUT /app icon endpoint

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

CVE-2026-100577

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the...

CVE-2026-100577 OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the...

CVE-2026-100577

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the...

CVE-2026-100577 OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the...

CVE-2026-100577 OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the...

CVE-2026-100577

OpenClaw versions prior to 2026.8.1 are vulnerable to a Server-Side Request Forgery (SSRF) . The issue stems from a failure to validate video asset URLs returned by providers. A malicious or compromised provider can provide private or loopback URLs , forcing the OpenClaw CLI to make unauthorized ...

PT-2026-99293

Name of the Vulnerable Software and Affected Versions capgo.app versions prior to 12.129.0 Description The application fails to verify the deletion status when serving cached bundle artifacts from the public file read endpoint. This allows unauthenticated attackers to download bundles that have...

CVE-2026-100577: Server-Side Request Forgery (SSRF)

OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the...

PT-2026-99213

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description OpenClaw fails to validate video asset URLs returned by providers, which enables server-side requests to private destinations. A malicious or compromised provider can return private or loopback...

CVE-2026-100391

MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter. Remote attackers can supply arbitrary internal URLs including loopback and cloud metadata endpoints to read full...

EUVD-2026-87328

MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter. Remote attackers can supply arbitrary internal URLs including loopback and cloud metadata endpoints to read full...

CVE-2026-100391 MediaFlow Proxy through 2.4.9 Server-Side Request Forgery via Incomplete Validation

MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter. Remote attackers can supply arbitrary internal URLs including loopback and cloud metadata endpoints to read full...

PT-2026-98853

Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description The crawler splash domain page showDomain.html is susceptible to stored cross-site script injection XSS. This occurs because user-supplied data from imported crawler captures—specifical...

PT-2026-99111

Name of the Vulnerable Software and Affected Versions MediaFlow Proxy versions prior to 2.5.0 Description An issue exists in the '/proxy' endpoint where missing and incomplete destination validation of the d query parameter allows for server-side request forgery SSRF. This occurs when a server is...

CVE-2026-91119 Discourse: Encode action_code_who in mention URLs

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...