1260 matches found
CVE-2026-40088
PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...
CVE-2026-40088
PraxionAI (PraisonAI) is vulnerable to OS command injection prior to version 4.5.121. The execute_command function and workflow shell execution accept user-controlled input through YAML workflows, agent configurations, and LLM-generated tool calls, passing commands with shell=True to subprocess.r...
EUVD-2026-21064
PraisonAI is a multi-agent teams system. Prior to 4.5.121, the executecommand function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to inject arbitrary shell commands through shell...
Command Injection
Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...
CVE-2026-33458 Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure
Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...
CVE-2026-33458 Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure
Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...
Kibana 9.3.3 Security Update (ESA-2026-28)
Server-Side Request Forgery SSRF in Kibana One Workflow Leading to Information Disclosure Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in...
Emissary has GitHub Actions Shell Injection via Workflow Inputs
Summary Three GitHub Actions workflow files contained 10 shell injection points where user-controlled workflowdispatch inputs were interpolated directly into shell commands via $ expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to reposito...
Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps
Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers move across Windows endpoints, executive MacBooks, Linux infrastructure, and mobile devices, taking advantage of the fact that many SOC workflows are still...
GHSA-R5FR-RJXR-66JC vulnerabilities
Vulnerabilities for packages: argo-workflows, code-server, py3-captum, kubeflow-katib, renovate, wazuh-dashboard, tensorflow-cpu-jupyter, drupal, langfuse, semaphore, vitess, redisinsight, arangodb, jitsucom-jitsu, py3-jupyterlab, opensearch-dashboards-fips, foxx-cli, gitlab-rails-ce, npm,...
CVE-2026-2950 vulnerabilities
Vulnerabilities for packages: argo-workflows, code-server, py3-captum, kubeflow-katib, renovate, wazuh-dashboard, tensorflow-cpu-jupyter, drupal, langfuse, semaphore, vitess, redisinsight, arangodb, jitsucom-jitsu, py3-jupyterlab, opensearch-dashboards-fips, foxx-cli, gitlab-rails-ce, npm,...
GHSA-F23M-R3PF-42RH vulnerabilities
Vulnerabilities for packages: argo-workflows, code-server, py3-captum, kubeflow-katib, renovate, wazuh-dashboard, tensorflow-cpu-jupyter, drupal, langfuse, semaphore, vitess, redisinsight, arangodb, jitsucom-jitsu, py3-jupyterlab, opensearch-dashboards-fips, foxx-cli, gitlab-rails-ce, npm,...
CVE-2026-4800 vulnerabilities
Vulnerabilities for packages: argo-workflows, code-server, py3-captum, kubeflow-katib, renovate, wazuh-dashboard, tensorflow-cpu-jupyter, drupal, langfuse, semaphore, vitess, redisinsight, arangodb, jitsucom-jitsu, py3-jupyterlab, opensearch-dashboards-fips, foxx-cli, gitlab-rails-ce, npm,...
CVE-2026-5199
A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...
CVE-2026-4800 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, prism, jitsucom-jitsu, code-server, saf, argo-workflows, json-server, ts-patch, kubeflow-centraldashboard, opensearch-dashboards, renovate, npm, py3-jupyterlab, sqlpad, kubeflow-katib, langfuse, vitess...
GHSA-R5FR-RJXR-66JC vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, prism, jitsucom-jitsu, code-server, saf, argo-workflows, json-server, ts-patch, kubeflow-centraldashboard, opensearch-dashboards, renovate, npm, py3-jupyterlab, sqlpad, kubeflow-katib, langfuse, vitess...
CVE-2026-2950 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, prism, jitsucom-jitsu, code-server, saf, argo-workflows, json-server, ts-patch, kubeflow-centraldashboard, opensearch-dashboards, renovate, npm, py3-jupyterlab, sqlpad, kubeflow-katib, langfuse, vitess...
GHSA-F23M-R3PF-42RH vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, prism, jitsucom-jitsu, code-server, saf, argo-workflows, json-server, ts-patch, kubeflow-centraldashboard, opensearch-dashboards, renovate, npm, py3-jupyterlab, sqlpad, kubeflow-katib, langfuse, vitess...
[Video] The TTP Ep 21: When Attackers Become Trusted Users
!\Video\ The TTP Ep 21: When Attackers Become Trusted Usershttps://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/04/YiR2025cover2x1.jpg In this episode of the Talos Threat Perspective, we explore how identity is being used to gain, extend, and maintain access...
Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster
A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...