CVE-2026-108756

The Abilityai Trinity software (versions through 0.9.5 ) contains a missing authorization vulnerability within the Telegram router . This flaw allows agent-scoped MCP API keys to execute operations restricted to human users, specifically binding operations . An attacker who gains control of an ag...

EUVD-2026-96921

Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations. Attackers controlling an agent, typically via prompt injection, can send messages through the owner's bot token,...

CVE-2021-37671

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.Map and tf.rawops.OrderedMap operations. The implementation has a check in place to ensure that indices is in...