CVE-2026-120202

Highflame ramparts versions 0.8.1 through 0.8.10 are vulnerable to a security scan bypass. The vulnerability exists because the collect_bundle_siblings and walk_bundle_subdir functions skip nested directories and .pyc files. This allows attackers to hide malicious payloads by distributing a skill...

EUVD-2026-114723

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

EUVD-2026-70226

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811 agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-84811

agentverus-scanner (a security scanning tool for code analysis) fails to analyze compiled Python bytecode files in companion code directories, enabling a security scanning bypass . Attackers can ship malicious __pycache__ entries alongside benign source files, causing arbitrary Python bytecode to...

CVE-2026-84809: Protection Mechanism Failure

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84811: Protection Mechanism Failure

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...

CVE-2026-81690 verify-usb before 1.4.9 Symlink Directory Traversal Code Execution

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

CVE-2025-61667

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the "opt/datadog-agent/python-scripts/pycache" directory during installation...

CVE-2025-61667: Incorrect Default Permissions

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...