screenpipe

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe finds work worth automating in your company Continuously record your company's computer work, map workflows, help find work worth automating, and power agents' context https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7...

PT-2026-98205

Name of the Vulnerable Software and Affected Versions Amazon Kiro IDE versions prior to 1.0.242 Description The file write tool allows remote unauthenticated actors to inject crafted instructions into the agent's context. This occurs when a user runs the agent within a crafted repository as an...

screenpipe live-view-assets

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe remembers how you actually work Record your screen continuously locally and provide context to your agents Claude, Codex, Openclaw, Hermes, Runner... https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7f news 06/10 - we...

screenpipe app-v2.5.163

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe remembers how you actually work Record your screen continuously locally and provide context to your agents Claude, Codex, Openclaw, Hermes, Runner... https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7f news 06/10 - we...

screenpipe app-v2.5.158

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe remembers how you actually work Record your screen continuously locally and provide context to your agents Claude, Codex, Openclaw, Hermes, Runner... https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7f news 06/10 - we...

screenpipe app-v2.5.150

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe remembers how you actually work Record your screen continuously locally and provide context to your agents Claude, Codex, Openclaw, Hermes, Runner... https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7f news 06/10 - we...

PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

SummaryThe MultiAgentLedger and MultiAgentMonitor components in the provided code exhibit vulnerabilities that can lead to context leakage and arbitrary file operations. Specifically:1. Memory State Leakage via Agent ID Collision: The MultiAgentLedger uses a dictionary to store ledgers by agent I...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), acuity (6.18.0) +507 more potentially affected by CVE-2026-44512 via onnx (>=1.9.0, <=1.21.0)

onnx PYPI version =1.9.0, =0.1.0.dev2, =6.12.0, =0.3.0, =0.1.0, =0.0.0, =1.0.1, =0.0.8, =0.1.0, =2.0.0, =1.31.1, =2.9.0 and more Source cves: CVE-2026-44512 Source advisory: SNYK:PYTHON-ONNX-17878694...

CVE-2026-48209 Reflected XSS in authenticated agent context

An improper neutralization of user-controllable input in OTRS or OTRS Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting XSS attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into...

CVE-2026-48209

OTRS Community Edition 7.0.x is vulnerable to reflected XSS due to improper neutralization of user-controllable input in ticket handling. Attackers who are authenticated can exploit crafted request parameters in ticket actions to inject JavaScript via manipulated request URLs, executing code in t...

CVE-2026-43534 OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events

OpenClaw before 2026.4.10 contains an input validation vulnerability that allows external hook metadata to be enqueued as trusted system events. Attackers can supply malicious hook names to escalate untrusted input into higher-trust agent context...

CVE-2026-43534 OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events

OpenClaw before 2026.4.10 contains an input validation vulnerability that allows external hook metadata to be enqueued as trusted system events. Attackers can supply malicious hook names to escalate untrusted input into higher-trust agent context...

CVE-2026-41358

OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized thread messages through allowlisted user replies to bypass sender access controls and manipulate model context...

OpenClaw 访问控制错误漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.2 contained a access control vulnerability. This vulnerability stemmed from the failure to filter Slack thread contexts based on the sender’s permission list, allowing messages...

PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling

Summary The MultiAgentLedger and MultiAgentMonitor components in the provided code exhibit vulnerabilities that can lead to context leakage and arbitrary file operations. Specifically: 1. Memory State Leakage via Agent ID Collision: The MultiAgentLedger uses a dictionary to store ledgers by agent...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), acuity (6.18.0) +512 more potentially affected by CVE-2026-34445 via onnx (>=1.1.1, <=1.20.1)

onnx PYPI version =1.1.1, =0.1.0.dev2, =6.6.0, =0.3.0, =0.1.0, =0.0.0, =1.0.1, =0.0.8, =0.1.0, =2.0.0, =1.31.1, =2.9.0 and more Source cves: CVE-2026-34445 Source advisory: OSV:PYSEC-2026-2240...

acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), acuity (6.18.0) +504 more potentially affected by CVE-2026-27489 via onnx (>=1.1.1, <=1.20.0)

onnx PYPI version =1.1.1, =0.1.0.dev2, =6.6.0, =0.3.0, =0.1.0, =0.0.0, =1.0.1, =0.0.8, =0.1.0, =2.0.0, =1.31.1, =2.9.0 and more Source cves: CVE-2026-27489 Source advisory: GHSA-3R9X-F23J-GC73...

Exploit for CVE-2026-25130

CVE-2026-25130 – Cybersecurity AI CAI Framework Argument Inj...

CVE-2025-69220

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files to t...

EUVD-2025-206261

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files to t...