3792 matches found
RHSA-2026:2712 Red Hat Security Advisory: resource-agents security update
Bulletin has no description...
Important: Red Hat Security Advisory: resource-agents security update
An update for resource-agents is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: resource-agents security update
An update for resource-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
RHEL 7 : resource-agents (RHSA-2026:2758)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2758 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several service...
RHEL 8 : resource-agents (RHSA-2026:2712)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2712 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several service...
Cross-site Scripting (XSS)
Overview agents is an A home for your AI agents Affected versions of this package are vulnerable to Cross-site Scripting XSS via the errordescription query parameter, which is directly interpolated into an HTML script tag without proper escaping. An attacker can execute arbitrary JavaScript in th...
@absmartly/mcp (>=1.1.0, <=1.2.4), @agishub/mcp (>=2.1.0, <=3.0.1) +115 more potentially affected by unknown CVE via agents (>=0.0.43, <=0.2.35)
agents NPM version =0.0.43, =1.1.0, =2.1.0, =0.4.0, =1.1.1, =0.2.0, =0.1.0, =0.0.1, =1.0.1, =1.0.27 - @famma/mcp-auth 0.0.4 - @fastmcp-me/gologin-mcp 0.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W5CR-2QHR-JQC5...
@absmartly/mcp (>=1.1.0, <=1.2.4), @agishub/mcp (>=2.1.0, <=3.0.1) +115 more potentially affected by unknown CVE via agents (>=0.0.43, <=0.2.35)
agents NPM version =0.0.43, =1.1.0, =2.1.0, =0.4.0, =1.1.1, =0.2.0, =0.1.0, =0.0.1, =1.0.1, =1.0.27 - @famma/mcp-auth 0.0.4 - @fastmcp-me/gologin-mcp 0.0.8 and more Source cves: unknown CVE Source advisory: SNYK:JS-AGENTS-15282793...
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site
Summary A Reflected Cross-Site Scripting XSS vulnerability was discovered in the AI Playground's OAuth callback handler. The errordescription query parameter was directly interpolated into an HTML script tag without proper escaping, allowing attackers to execute arbitrary JavaScript in the contex...
@absmartly/mcp (>=1.1.0, <=1.2.4), @agishub/mcp (>=2.1.0, <=3.0.1) +115 more potentially affected by CVE-2026-1721 via agents (>=0.0.43, <=0.2.35)
agents NPM version =0.0.43, =1.1.0, =2.1.0, =0.4.0, =1.1.1, =0.2.0, =0.1.0, =0.0.1, =1.0.1, =1.0.27 - @famma/mcp-auth 0.0.4 - @fastmcp-me/gologin-mcp 0.0.8 and more Source cves: CVE-2026-1721 Source advisory: OSV:GHSA-CVHV-6XM6-C3V4...
GHSA-CVHV-6XM6-C3V4 Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler
Summary A Reflected Cross-Site Scripting XSS vulnerability was discovered in the AI Playground's OAuth callback handler. The errordescription query parameter was directly interpolated into an HTML script tag without proper escaping, allowing attackers to execute arbitrary JavaScript in the contex...
@absmartly/mcp (>=1.1.0, <=1.2.4), @agishub/mcp (>=2.1.0, <=3.0.1) +115 more potentially affected by CVE-2026-1721 via agents (>=0.0.43, <=0.2.35)
agents NPM version =0.0.43, =1.1.0, =2.1.0, =0.4.0, =1.1.1, =0.2.0, =0.1.0, =0.0.1, =1.0.1, =1.0.27 - @famma/mcp-auth 0.0.4 - @fastmcp-me/gologin-mcp 0.0.8 and more Source cves: CVE-2026-1721 Source advisory: SNYK:JS-AGENTS-15279200...
Cloudflare Agents 安全漏洞
Cloudflare Agents is an open-source tool developed by Cloudflare for building and deploying AI agents on Cloudflare platforms. There is a security vulnerability in Cloudflare Agents, which stems from the improper escaping of the errordescription query parameter in the OAuth callback handler of th...
The Rise of AI Agent Communities: Large-Scale Analysis of Discourse and Interaction on Moltbook
Moltbook is a Reddit-like social platform where AI agents create posts and interact with other agents through comments and replies, offering a real-world setting to examine agent-to-agent communication at scale. Using a public API snapshot collected about five days after launch 122,438 posts, we...
Assessing Spear-Phishing Website Generation in Large Language Model Coding Agents
Large Language Models are expanding beyond being a tool humans use and into independent agents that can observe an environment, reason about solutions to problems, make changes that impact those environments, and understand how their actions impacted their environment. One of the most common...
Top 10 actions to build agents securely with Microsoft Copilot Studio
Organizations are rapidly adopting Copilot Studio agents, but threat actors are equally fast at exploiting misconfigured AI workflows. Mis-sharing, unsafe orchestration, and weak authentication create new identity and data‑access paths that traditional controls don’t monitor. As AI agents become...
Detecting and mitigating common agent misconfigurations
Organizations are rapidly adopting agents, but attackers are equally fast at exploiting misconfigured AI workflows. Mis-sharing, unsafe orchestration, and weak authentication create new identity and data‑access paths that traditional controls don’t monitor. As agents become integrated into...
CVE-2026-0228
An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so...
Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity
Wiz Research’s AI Cyber Model Arena benchmarks offensive AI security on 257 real-world challenges zero-days, CVEs, API/web, and cloud across AWS/Azure/GCP/K8s demonstrating what AI models and agents can really do...
