CVE-2026-61433 PraisonAI before 4.6.78 Code Injection via API deployment generator

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agentsfile configuration parameters that execute when the generated server starts or...

Exploit for CVE-2026-55511

CVE-2026-55511 PoC Non-weaponized proof of concept for a Yamc...

PT-2026-60137

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78 Description The software fails to safely encode deployment configuration values during the generation of Python source code for API servers. This allows attackers to inject arbitrary Python expressions via th...

The vulnerability of the control consoles for SonicWall SMA 1000 microprogrammed network interface devices allows attackers to execute arbitrary code.

The vulnerability of the control consoles for SonicWall’s SMA 1000 microprogrammed network interface devices is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability affects the implementation of the WebRTC technology in Mozilla Firefox ESR and Thunderbird email client, allowing a hacker to execute arbitrary code.

The vulnerability in the implementation of the WebRTC technology in Mozilla Firefox ESR and the Thunderbird email client is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-50650

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...

CVE-2026-24226

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

EUVD-2026-44464

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-24226

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

PT-2026-58743

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-57811

Improper Control of Generation of Code 'Code Injection' vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through = 5.2.0...

ROS-20260713-73-0048

The vulnerability in GitPython is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the `io.netty.handler.codec.redis.RedisEncoder` component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to inject arbitrary commands.

The vulnerability of the io.netty.handler.codec.redis.RedisEncoder component in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper code generation. Exploiting this vulnerability allows a remote attacker to inject arbitrary...

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly li...

The vulnerability of the Lodash library, related to improper handling of code generation, allows attackers to trigger a service failure.

The vulnerability of the Lodash library is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the compile() function in the Handlebars template creation tool allows a attacker to cause a service failure.

The vulnerability of the compile function in the Handlebars template creation tool is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Handlebars.compile() function, a tool for creating Handlebars templates, allows a malicious actor to cause a service failure.

The vulnerability of the Handlebars.compile function, a tool for creating Handlebars templates, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Trellix Endpoint Security (HX) Agent software allows a perpetrator to elevate their privileges to a system-level level.

The vulnerability of the Trellix Endpoint Security HX Agent software is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...

The vulnerability of the `resolvePartial()` and `invokePartial()` functions in the `lib/handlebars/runtime.js` component, a tool for creating Handlebars templates, allows a malicious actor to cause a service failure.

The vulnerability of the resolvePartial and invokePartial functions in the lib/handlebars/runtime.js component, which is used for creating Handlebars templates, is related to improper code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the JavaScript function in the Protocol Buffers (Protobuf) library called protobufjs, which allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript function in the Protocol Buffers Protobuf library, called protobufjs, is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...