155 matches found
VS Code Extension Persistence
This module installs a malicious VS Code extension into the target's VS Code extensions directory. The extension executes the payload each time VS Code is launched, providing persistent code execution. Supports VS Code, VS Code Insiders, VSCodium, VS Code Server, and Cursor. Tested against 1.120....
VS Code Extension Persistence
This Metasploit module installs a malicious VS Code extension into the target's VS Code extensions directory. The extension executes the payload each time VS Code is launched, providing persistent code execution. Supports VS Code, VS Code Insiders, VSCodium, VS Code Server, and Cursor. Tested...
GHSA-58QX-3VCG-4XPX vulnerabilities
Vulnerabilities for packages: langfuse, kubeflow-katib, opensearch-dashboards, py3-jupyterlab, code-server, vitess, kubeflow-pipelines, argo-workflows...
CVE-2026-45736 vulnerabilities
Vulnerabilities for packages: langfuse, kubeflow-katib, opensearch-dashboards, py3-jupyterlab, code-server, vitess, kubeflow-pipelines, argo-workflows...
CVE-2026-44240 vulnerabilities
Vulnerabilities for packages: code-server...
GHSA-RPMF-866Q-6P89 vulnerabilities
Vulnerabilities for packages: code-server...
CVE-2026-42302
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
CVE-2026-42302
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
CVE-2026-42302 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
CVE-2026-42302
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
CVE-2026-42302 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
CVE-2026-42302 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
EUVD-2026-28850
FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...
CVE-2026-42302
FastGPT: agent-sandbox vulnerable in 4.14.10–4.14.12 due to entrypoint.sh launching code-server with --auth none and binding to 0.0.0.0:8080, enabling unauthenticated remote code execution and full sandbox access. The issue is mitigated in version 4.14.13. Practical impact is unauthenticated netw...
PT-2026-39205
Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.10 through 4.14.12 Description The agent-sandbox component allows unauthenticated Remote Code Execution RCE, which is the ability to execute arbitrary commands on a remote machine. The startup script entrypoint.sh...
CVE-2026-41324 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, kibana, opensearch-dashboards-fips, code-server...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: dbgate, jitsucom-jitsu, homepage, npm, kubeflow-katib, tensorflow-cpu-jupyter, nextcloud-server, renovate, dbgate-fips, kubeflow-pipelines, wazuh-dashboard-fips, drupal, gitlab-rails-ce-fips, langfuse, gemini-cli, wazuh-dashboard, opensearch-dashboards, argo-workflow...
CVE-2026-41324 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, code-server...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, langfuse, kubeflow-katib, jitsucom-jitsu, saf, renovate, opensearch-dashboards, npm, py3-jupyterlab, prism, sqlpad, code-server, kubeflow-pipelines, argo-workflows, nextcloud-server...