CVE-2025-51859

CVE-2025-51859 Vulnerability description Chaindesk, a web application for constructing AI Agents, is vulnerable to Stored Cross-Site Scripting XSS in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the...

EUVD-2026-101724

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

CVE-2026-110841

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

CVE-2026-110841 n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

CVE-2026-110841 n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

CVE-2026-110841 n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

CVE-2026-110841

The n8n platform (versions before 2.41.4 and 2.42.0 ) is vulnerable to an authorization bypass in the agent chat resume endpoint. The root cause is the failure to verify that a suspended checkpoint belongs to the caller when a run identifier is accepted from the request body. Authenticated projec...

CVE-2026-110841

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

PT-2026-114155

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.41.4 n8n versions prior to 2.42.0 Description An authorization bypass exists in the agent chat resume endpoint. The system accepts a run identifier from the request body without verifying if the suspended checkpoint...

CVE-2026-110841: Authorization Bypass Through User-Controlled Key

n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +5 more potentially affected by CVE-2026-120492 +1 more via chainlit (>=2.4.400, <=2.11.1)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2026-120492, CVE-2026-45019 Source advisory: OSV:GHSA-HVFH-5MJ3-5F3J...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +5 more potentially affected by CVE-2026-45018 via chainlit (>=2.4.400, <=2.11.1)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2026-45018 Source advisory: OSV:GHSA-W3FX-MC44-MF6J...

PT-2026-64137

PraisonAI AgentTeam.launch exposes unauthenticated remote agent invocation endpoints Summary PraisonAI's documented Python AgentTeam.launch / Agents.launch HTTP server starts externally reachable agent invocation endpoints without any authentication enforcement. The current implementation registe...

CVE-2026-65015

CVE-2026-65015 affects n8n and is exploitable in versions before 2.30.1 through the AI Agents feature. The issue arises because the node-execution tool does not perform proper authorization checks, enabling a Project Viewer user to escalate privileges by chatting with an agent that has node tools...

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

PraisonAI AgentTeam.launch exposes unauthenticated remote agent invocation endpoints Summary PraisonAI's documented Python AgentTeam.launch / Agents.launch HTTP server starts externally reachable agent invocation endpoints without any authentication enforcement. The current implementation registe...

PT-2026-61770

Name of the Vulnerable Software and Affected Versions praisonai versions 4.2.1 through 4.6.57 Description The AgentOS FastAPI deployment surface fails to implement authentication, allowing unauthenticated remote users to invoke agents. This issue persists in versions previously reported as patche...

ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.8.4), ai.mindconnect:mc-agent-admin-ui-rest (>=0.0.2, <=0.8.4) +4172 more potentially affected by CVE-2026-22751 via org.springframework.security:spring-security-core (>=6.4.0, <=6.5.9)

org.springframework.security:spring-security-core MAVEN version =6.4.0, =0.0.2, =0.0.2, =0.8.1, =0.0.3, =0.8.1, =0.5.8, =0.0.1, =55.v51410e712e0c, =0.1.0, =0.1.0, =0.1.0, =1.5.4.release, =1.5.8.release and more Source cves: CVE-2026-22751 Source advisory:...

CVE-2025-51859: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...