PYSEC-2026-560 utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

Summary The substituteutcpargs method in clicommunicationprotocol.py inserts user-controlled toolargs values directly into shell command strings without any sanitization or escaping. These commands are then executed via /bin/bash -c Unix or powershell.exe -Command Windows, allowing an attacker to...

PYSEC-2026-400 llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

PT-2026-53310

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper neutralization of local CLI parameters allows unintended SQL execution. A user can trigger this issue by providing crafted values to the Cortex SQL or object listing command paths,...

PT-2026-53321

Name of the Vulnerable Software and Affected Versions Snowflake CLI versions prior to 3.19 Description Improper handling of untrusted remote references allows server-side request forgery SSRF, a condition where a server is coerced into making requests to an unintended destination. The SQL stateme...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, flux, flux-image-automation-controller, commercial-grafana, flux-source-controller-fips, snyk-cli, mattermost-fips, cloud-provider-aws, kubernetes-dashboard, elastic-agent-fips, gitlab-rails-ce, harbor, frankenphp-8.2, prometheus-mongodb-exporter,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: act, calico-fips, crossplane-provider-azure-web, flux, crossplane-provider-azure-authorization, flux-source-controller-fips, mattermost-fips, cloud-provider-aws, crossplane-provider-aws-kendra-fips, crossplane-provider-family-aws, crossplane-provider-aws-macie2-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: act, calico-fips, crossplane-provider-azure-web, flux, crossplane-provider-azure-authorization, flux-source-controller-fips, mattermost-fips, cloud-provider-aws, crossplane-provider-aws-kendra-fips, crossplane-provider-family-aws, crossplane-provider-aws-macie2-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: act, calico-fips, flux, rancher-machine, flux-image-automation-controller, commercial-grafana, mapotf, flux-source-controller-fips, terraform-fips, snyk-cli, mattermost-fips, cloud-provider-aws, podman-fips, buildkitd, kubernetes-dashboard, elastic-agent-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: calico-fips, buildah-fips, flux, commercial-grafana, terraform-fips, snyk-cli, mattermost-fips, cloud-provider-aws, podman-fips, kubernetes-dashboard, elastic-agent-fips, gitlab-rails-ce, harbor, frankenphp-8.2, prometheus-mongodb-exporter, cert-manager,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, terraform-provider-tls, prometheus, pulumi-language-dotnet, opentelemetry-collector, k8sgpt, cloud-provider-aws, external-secrets-operator, rancher-machine, tflint, buildah, steampipe, chezmoi, gh, neuvector-sigstore-interface, pulumi,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kyverno, cilium, prometheus, opentelemetry-collector, zot, rancher, knative-serving, cilium-cli, kots, telegraf, cloud-provider-aws, external-secrets-operator, flux-image-automation-controller, kubescape, cert-manager, osv-scanner, skaffold, aactl, loki, helm, chisel...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kyverno, cilium, docker-cli-buildx, prometheus, opentelemetry-collector, zot, rancher, knative-serving, cilium-cli, kots, telegraf, cloud-provider-aws, external-secrets-operator, buildah, cert-manager, aactl, loki, helm, snyk-cli, spire-server, kaf, containerd, istio...

GO-2026-5656 Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli

Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users in github.com/kubetail-org/kubetail/modules/cli. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go...

GO-2026-5335 GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli

GitHub CLI: GitHub Actions log output in gh run view allows terminal escape sequence injection in github.com/cli/cli...

GO-2026-5271 GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands in github.com/cli/cli

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands in github.com/cli/cli...

MAL-2026-6421 Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Malicious code in leo-cli (npm)

The leo-cli npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-48721 Warp: Env-var prefixes can lead to denylisted command autoexecution

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...