38 matches found
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
GHSA-35JJ-42HP-8GMQ n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...
CVE-2026-86077
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the...
CVE-2026-86077
n8n , an open-source workflow automation platform, contained an authorization flaw in the /chat WebSocket route (specifically the canResumeOverChat function in chat-execution-manager.ts). Prior to versions 2.37.7 and 2.38.2 , a resumeToken issued to an anonymous form submitter could be replayed o...
CVE-2026-86077 n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the...
CVE-2026-86077 n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the...
EUVD-2026-74041
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...
PT-2026-88508
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
CVE-2026-58424
CVE-2026-58424 - Gitea Fork PR Workflow Approval Gate Bypass Severity: High CVSS 8.9 Affected: Gitea ≤ 1.26.2 Fixed in: Gitea 1.26.3 Advisory: GHSA-777r-4v59-6486 Vulnerability Description Gitea Actions enforces an approval gate on workflow runs triggered by fork pull requests. The gate is...
GHSA-CFXV-8FW8-RWPV praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
Target: PraisonAI MervinPraison/PraisonAI Affected component: praisonaiagents/tools/astgreptool.py — astgreprewrite Affected versions: master at ce97667156a116c50b4a3d1aa21e09f048903fda; reproduced against the current praisonaiagents PyPI release praisonaiagents --rewrite --lang --update-all line...
CVE-2026-55530
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58 , the ast_grep_rewrite tool lacks the @require_approval decorator enforced on sibling mutation tools. With dry_run=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the ...
CVE-2026-55530 PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...
EUVD-2026-65501
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...
CVE-2026-73615
Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...
EUVD-2026-57819
Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...
CVE-2026-73615 Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch
Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...
Malicious code in agenttunnels (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264711675c5edabf4f3d0b1d544ca8bade34057c973ca614c82bca3cf8bdd5a1 agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker agenttunnels-session.lakshman111.workers.dev...
CVE-2026-66065
CVE-2026-66065 affects Ouroboros, a local-first runtime for AI coding agents. Before 0.42.1, the denylist was incomplete: multiple execution-routing keys of the same RCE class were omitted, allowing a malicious cloned repo to trigger arbitrary command execution via a .env loaded at import. The pr...
