CVE-2026-51879

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

Rasa 安全漏洞

Rasa is an open source machine learning framework for automating text- and speech-based conversations. Rasa suffers from a security vulnerability that stems from the upload of untrusted model files in the affected version. An attacker could use the vulnerability to overwrite or replace bot files ...