A week in security (September 21 – September 27)

Last week on Malwarebytes Labs: LinkedIn adds new checks for fake profiles and work histories Kothamine malware uses Tailscale’s tailcat to evade network detection Criminals turn placeholder domain into ClickFix trap That shipping rebate offer may come with a monthly charge OpenAI agent breached...

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers...

EUVD-2026-84197

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...

CVE-2026-77519: Insufficient Session Expiration

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the ispermanent and expiretime checks used by the standard chat API. A previously valid,...

CVE-2026-91847

The Online Scheduling and Appointment Booking System (Bookly) WordPress plugin, in versions before 28.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a failure to verify that a requester owns the specific AI booking-assistant conversation named in unauthenticat...

CVE-2026-91847 Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversation named in its unauthenticated conversation actions, allowing any unauthenticated visitor to read another visitor's assistant messages and ...

CVE-2026-91847 Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversation named in its unauthenticated conversation actions, allowing any unauthenticated visitor to read another visitor's assistant messages and ...

CVE-2026-92992

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...

CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...

CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...

CVE-2026-92992

Dromara mayfly-go (up to 1.11.5 ) contains an authorization flaw in the AI Assistant component (file server/internal/ai/api/ai.go). The whitelist bypass is one-token wide: any compound command containing curl , wget , or sed executes automatically without approval, and that approval is granted by...

EUVD-2026-82387

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...

CVE-2026-92992 Dromara mayfly-go AI Assistant ai.go authorization

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...

PT-2026-95071

Name of the Vulnerable Software and Affected Versions Dromara mayfly-go versions prior to 1.11.6 Description A missing authorization issue exists within the AI Assistant component, specifically in the server/internal/ai/api/ai.go file. This flaw allows for remote exploitation via a whitelist bypa...

CVE-2026-92992: Missing Authorization

A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The...

Pentesting-AI-assistant

Pentest Team Share — by laplapp ⚠️ EDUCATIONAL PURPOSES O...

WordPress All in One SEO plugin < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block vulnerability

Contributor+ Stored XSS via ai-assistant Block vulnerability discovered by Asaf Mozes in WordPress Plugin All In One SEO Pack versions 5.0.0.1...

ROS-20260911-73-0215

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome of the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

Introducing AI Assistant for Akamai Web Security Analytics

Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...

Kibana 8.19.11 < 8.19.21 / 9.3.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-142)

The version of Kibana installed on the remote host is 8.19.11 prior to 8.19.21, or 9.3.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-142 advisory. - Incorrect Authorization CWE-863 in Kibana can lead to unauthorized...