CVE-2026-108586 1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter

1MCP Agent @1mcp/agent 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not to list and invoke...

CVE-2026-108586

The 1MCP Agent (@1mcp/agent) versions 0.20.0 through 0.39.0 are vulnerable to an incorrect authorization issue (CWE-863). This flaw allows authenticated clients to bypass OAuth tag-scope enforcement by utilizing negated advanced tag-filter expressions . Specifically, an attacker possessing a toke...

CVE-2026-108586 1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter

1MCP Agent @1mcp/agent 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not to list and invoke...

CVE-2026-108586

1MCP Agent @1mcp/agent 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not to list and invoke...

EUVD-2026-96373

1MCP Agent @1mcp/agent 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not to list and invoke...

Malicious code in agent-vx (PyPI)

Source: kam193 815c9aad02259785c1e8b8569c0aead4598c1ea8f4802463a8db7f7240410296 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in agent-vx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f0a2b273b0361ffd4057f114f1be1eaf9469c9746d2737a21947905570ff80 On import agentaix, the package's init.py runs a top-level installmanage side effect that renames a bundled readme.txt into manage.py and launches it...

MAL-2026-17755 Malicious code in agent-vx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f0a2b273b0361ffd4057f114f1be1eaf9469c9746d2737a21947905570ff80 On import agentaix, the package's init.py runs a top-level installmanage side effect that renames a bundled readme.txt into manage.py and launches it...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: consul-k8s, qemu-guesthelper, google-osconfig-agent, commercial-gitlab-workhorse-ee, nemo, commercial-chainloop-cli, commercial-spilo-fips, kube-conformance, frankenphp-8.4, commercial-grafana, loki, cert-manager, omnictl-multiarch-fips, tigera-operator, prometheus,...

GHSA-MJCV-P78Q-W5FW vulnerabilities

Vulnerabilities for packages: datadog-agent, act, scorecard, zarf, xeol, runc, undock, k3d, dagger, k3s, neuvector-scanner, gosu, newrelic-infrastructure-agent, vcluster, ctop, containerd, docker...

CVE-2026-61801 vulnerabilities

Vulnerabilities for packages: datadog-agent, act, scorecard, zarf, xeol, runc, undock, k3d, dagger, k3s, neuvector-scanner, gosu, newrelic-infrastructure-agent, vcluster, ctop, containerd, docker...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: karpenter, kyverno-policy-reporter-ui, cert-manager, k8s-device-plugin, prometheus-adapter, terragrunt, cloudprober, kube-arangodb, headlamp, flux, gitness, gitlab-pages, grafana, cert-manager-webhook-pdns, continuity, rclone, external-dns, filebrowser, hubble-ui,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: karpenter, kyverno-policy-reporter-ui, cert-manager, k8s-device-plugin, prometheus-adapter, terragrunt, cloudprober, kube-arangodb, headlamp, flux, gitness, gitlab-pages, grafana, cert-manager-webhook-pdns, continuity, rclone, external-dns, filebrowser, hubble-ui,...

Log4Jolokia

Log4Jolokia Descrizione: Implementazione Python3 per sfruttare gli MBean di Log4J tramite Jolokia Utilizzo: Aiuto generico: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target target ... position...

CVE-2026-108593: Improper Control of Generation of Code

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

CVE-2026-108592: Cleartext Storage of Sensitive Information in an Environment Variable

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the...

CVE-2026-108600: Improper Link Resolution Before File Access

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

PT-2026-109732

Name of the Vulnerable Software and Affected Versions mini-swe-agent versions 1.10.0 through 2.4.6 Description An information exposure issue exists in the BubblewrapEnvironment where the bwrap tool is executed without the --clearenv flag. This causes sandboxed commands to inherit the host...

CVE-2026-108586: Incorrect Authorization

1MCP Agent @1mcp/agent 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not to list and invoke...

CVE-2026-108263

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/codenode.py when CODEEXECTYPE is not explicitly...