OpenAI Codex CLI 安全漏洞

OpenAI Codex CLI is a lightweight coding agent software developed by OpenAI and run in the terminal. OpenAI Codex CLI versions prior to v0.23.0 have security vulnerabilities; these vulnerabilities stem from automatically loading malicious MCP configuration files, which may allow arbitrary code to...

Cisco IOS XR Privilege Escalation

The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems is related to deficiencies in access control based on access control lists ACLs. Exploiting this vulnerability can allow attackers to enhance their privileges and bypass existing security mechanisms...

Outlookproxy Plugin Privilege Escalation

The vulnerability of the command-line interface CLI of the Outlookproxy plugin on the cloud platform used for FortiDLP data protection is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to elevate their...

CVE-2025-61260: Improper Control of Generation of Code

A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP Model Context Protocol configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads...

oci-cli-3.76.2-1.1 on GA media (moderate)

oci-cli-3.76.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10539-1 Rating: moderate Cross-References: CVE-2024-37891 CVE-2024-47081 CVE-2025-47273 CVE-2025-50181 CVE-2025-66418 CVE-2026-21441 CVE-2026-26007 CVSS scores: CVE-2024-37891 SUSE : 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N...

CVE-2026-33948 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen to determine buffer length instead of the actual byte...

CVE-2026-21915

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)

Summary IBM Planning Analytics Cartridge is considered affected by a vulnerability in Docker CLI Vulnerability Details CVEID:CVE-2025-15558 DESCRIPTION: Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A...

OPENSUSE-SU-2026:10539-1 oci-cli-3.76.2-1.1 on GA media

These are all security issues fixed in the oci-cli-3.76.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8ssandra-client, istio, k9s-fips, tigera-operator-fips, trivy-operator-fips, rancher-fleet-fips, pluto-fips, helm-exporter-fips, kube-arangodb, linkerd2, helm-mapkubeapis, helm-docs, kube-arangodb-fips, trivy-operator, helm-diff-fips, cloudbeat,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubescape, go, aactl, cert-manager, gitaly, dask-gateway, nerdctl, aws-flb-cloudwatch, gitlab-kas, libnvidia-container, prometheus, external-secrets-operator, chezmoi, spire-server, kube-fluentd-operator, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubescape, dbmate, vault-benchmark, kubernetes-dashboard-auth, knative-serving, mockery, local-path-provisioner, flux, neuvector-dbgen, wuzz, knative-eventing, ingress-nginx-controller, php-fpmexporter, cilium, helm-push, q, supercronic,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubescape, dbmate, vault-benchmark, gitaly, kubernetes-dashboard-auth, newrelic-infrastructure-agent, chartmuseum, k8ssandra-client, cortex, falcoctl, verticadb-operator, kpt, kubernetes-csi-livenessprobe, cluster-api-provider-vsphere, libnvidia-container,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: backup-restore-operator-fips, atlas, coredns-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, minio-fips, gitaly, kube-arangodb-fips, newrelic-infrastructure-agent-fips, kubescape-server-fips, commercial-expanso-edge, gitlab-workhorse-ce, nats-server-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: backup-restore-operator-fips, atlas, coredns-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, minio-fips, gitaly, kube-arangodb-fips, newrelic-infrastructure-agent-fips, kubescape-server-fips, commercial-expanso-edge, gitlab-workhorse-ce, nats-server-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, atlas, coredns-fips, prometheus-node-exporter-fips, kubebuilder, sftpgo-plugin-auth, mesosphere-vsphere-csi-fips, dex-fips, kcp-fips, influxd, kyverno-policy-reporter-kyverno-plugin, minio-fips, gitaly,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, atlas, coredns-fips, prometheus-node-exporter-fips, kubebuilder, sftpgo-plugin-auth, mesosphere-vsphere-csi-fips, dex-fips, kcp-fips, influxd, kyverno-policy-reporter-kyverno-plugin, minio-fips, gitaly,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, backup-restore-operator-fips, atlas, coredns-fips, prometheus-node-exporter-fips, kubebuilder, sftpgo-plugin-auth, mesosphere-vsphere-csi-fips, dex-fips, kcp-fips, influxd, kyverno-policy-reporter-kyverno-plugin, minio-fips, gitaly,...

CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...