CVE-2026-30969

CVE-2026-30969 affects Coral Server prior to version 1.1.0, where active-session authentication between agents and the server was not enforced. An attacker who could obtain or predict a session identifier could impersonate an agent or join an existing session. The issue is resolved in version 1.1...

CVE-2026-30968 Coral Server has insufficient validation of agent identity for SSE connections

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint /sse/v1/... in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Th...

CVE-2026-30968 Coral Server has insufficient validation of agent identity for SSE connections

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint /sse/v1/... in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Th...

CVE-2026-30968 Coral Server has insufficient validation of agent identity for SSE connections

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint /sse/v1/... in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Th...

CVE-2026-30968

Summary: Coral Server’s SSE endpoint (/sse/v1/...) did not strongly validate that a connecting agent was a legitimate session participant before version 1.1.0, potentially allowing unauthorized message injection or observation. Affected versions: prior to 1.1.0. Impact: stated as possible confide...

CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2026-26117

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-26117

CVE-2026-26117 concerns Arc Enabled Servers running the Azure Connected Machine Agent. The vulnerability is an Elevation of Privilege issue affecting the Azure Arc-enabled machine agent on Arc-enabled servers. According to the CVSS data, it is a local, low-complexity attack requiring LOW privileg...

CVE-2025-54659

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 all versions may allow an unauthenticated attacker to read files accessible to the...

CVE-2025-54659

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 all versions may allow an unauthenticated attacker to read files accessible to the...

Exploit for CVE-2026-30741

Security Advisory: CVE-2026-30741 Product: OpenClaw Agent Pla...

Study Finds ROME AI Agent Attempted Cryptomining Without Instructions

A recent research paper describing the training of an experimental AI agent has started a discussion after the…...

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, buildah, kubernetes-csi-node-driver-registrar, memcached-exporter, amazon-cloudwatch-agent-operator, thanos, boring-registry, rancher, fscrypt, terraform-provider-pagerduty, terraform-provider-grafana, rancher-machine, gogatekeeper,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, buildah, kubernetes-csi-node-driver-registrar, memcached-exporter, amazon-cloudwatch-agent-operator, thanos, boring-registry, rancher, fscrypt, terraform-provider-pagerduty, terraform-provider-grafana, rancher-machine, gogatekeeper,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: buildah, memcached-exporter, amazon-cloudwatch-agent-operator, nats-top, gogatekeeper, restic, secrets-store-csi-driver-provider-azure, prometheus-pushgateway, aws-eks-pod-identity-agent, sftpgo-plugin-kms, smokescreen, ksops, trillian, nginx-prometheus-exporter,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: buildah, memcached-exporter, amazon-cloudwatch-agent-operator, nats-top, gogatekeeper, restic, secrets-store-csi-driver-provider-azure, prometheus-pushgateway, aws-eks-pod-identity-agent, sftpgo-plugin-kms, smokescreen, ksops, trillian, nginx-prometheus-exporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: buildah, memcached-exporter, amazon-cloudwatch-agent-operator, nats-top, gogatekeeper, restic, secrets-store-csi-driver-provider-azure, prometheus-pushgateway, aws-eks-pod-identity-agent, sftpgo-plugin-kms, smokescreen, ksops, trillian, nginx-prometheus-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, crossplane-provider-aws-cognitoidentity, jobset-fips, authentik, kubernetes-dashboard-api-fips, google-guest-agent, envoy-gateway-fips, crossplane-provider-sql-fips, kyverno-policy-reporter-kyverno-plugin-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, crossplane-provider-aws-cognitoidentity, jobset-fips, authentik, q, kubernetes-dashboard-api-fips, google-guest-agent, envoy-gateway-fips, mongo-tools, crossplane-provider-sql-fips, aws-application-networking-k8s,...