8732 matches found
CVE-2026-82270
Portkey AI Gateway through version 1.15.2 contains a Server-Side Request Forgery (SSRF) vulnerability in the /v1/proxy/* route. The root cause is the absence of the requestValidator middleware on that endpoint. An unauthenticated attacker can set the x-portkey-custom-host header to an internal ad...
CVE-2026-82112
A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...
CVE-2026-37751
An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-82112
A path traversal vulnerability exists in the houtini-ai/houtini-lm project (versions up to 2.13.2 ), specifically in the code_task_files component within src/index.ts . A remote attacker with low privileges and user interaction can manipulate an unknown function to read files outside the intended...
EUVD-2026-67712
A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...
CVE-2026-82233 SiYuan before v3.8.1 Path Traversal via asset.upload
SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into t...
CVE-2026-82233 SiYuan before v3.8.1 Path Traversal via asset.upload
SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into t...
CVE-2026-14558
CVE-2026-14558 affects the WP User Frontend WordPress plugin prior to 4.3.10 . The flaw lies in the AI Form Builder component, which does not properly validate field type definitions and deserialises user-controlled post metadata when rendering submitted posts. Users with Editor-level access (or ...
EUVD-2026-67327
The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...
CVE-2026-81847
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
CVE-2026-75337
The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...
Langflow AI authenticated RCE
Langflow versions 1.11.1 and below are susceptible to authenticated remote code execution. By saving a flow where data.type is empty, an authenticated user can bypass the flow guard and execute arbitrary Python code. Module Options msf use exploit/multi/http/langflow/authrcecve202619295 msf...
EUVD-2026-67772
An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...
Opera bug bounty: How vulnerability research is evolving with AI
Security Opera bug bounty: How vulnerability research is evolving with AI Share August 28th, 2026 Hi Opera users! Browser security is constantly evolving, and so are the ways vulnerabilities are discovered. At Opera, we heavily invest in securing our products and services through the efforts of o...
CVE-2026-37751
An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-37751
An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-37751
An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows remote attackers to execute arbitrary commands via a crafted input. The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector requiring no privi...
CVE-2026-81847
MAA-AI MaaMCP versions up to 1.1.1.dev6+g2e4a41287 are affected by a path traversal vulnerability in the save_pipeline/load_pipeline functions of pipeline_tools.py . The flaw allows a remote attacker with low privileges and user interaction to manipulate file paths, potentially reading or writing...
CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...