PT-2026-59584

Summary The execute command function in shell tools.py calls os.path.expandvars on every command argument at line 64, manually re-implementing shell-level environment variable expansion despite using shell=False line 88 for security. This allows exfiltration of secrets stored in environment...

PT-2026-59501

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

PT-2026-59310

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the mlflow/sagemaker/ init .py file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization,...

PT-2026-59101

composio =0.5.40 is vulnerable to Command Execution in composio openai, composio claude, and composio julep via the handle tool calls function...

PT-2026-59100

composio =0.5.40 is vulnerable to Command Execution in composio openai, composio claude, and composio julep via the handle tool calls function...

PT-2026-59148

Unauthenticated Command Execution via HTTP MCP execute module Summary The HTTP MCP endpoint POST /mcp in flyto-core accepts unauthenticated JSON-RPC tools/call requests and dispatches them to arbitrary registered modules, including sandbox.execute shell, which passes attacker-controlled input...

PT-2026-59695

A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution...

PT-2026-59072

Summary The AWS Bedrock AgentCore Python SDK bedrock-agentcore is an open-source SDK that enables developers to build, deploy, and manage agents on AWS Bedrock AgentCore. An issue exists in the install packages method of the Code Interpreter client where crafted package name arguments can bypass...

Wavlink WL-NU516U1 USB Printer Command Execution

The vulnerability of the usbp910 function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotel...

RUGGEDCOM ROX MX5000 Routing Switching Platform Command Execution

The vulnerability of the Scheduler component in the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 lies in the lack of measures to neutralize specific elements. Exploiting this...

RUGGEDCOM ROX MX5000 Scheduler Arbitrary Command Execution

The vulnerability of the Scheduler component in the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000 lies in the lack of measures to neutralize specific elements. Exploiting this...

TOTOLINK A8000RU CGI Handler setStorageCfg Command Execution

The vulnerability of the setStorageCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute...

TOTOLINK A8000RU CGI Handler setNtpCfg Command Execution

The vulnerability of the setNtpCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary command...

TOTOLINK A8000RU CGI Handler Command Execution

The vulnerability of the CsteSystem function in the /cgi-bin/cstecgi.cgi file, belonging to the CGI Handler component of the TOTOLINK A8000RU router’s software, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execu...

TOTOLINK A8000RU CGI Handler setDmzCfg Command Execution

The vulnerability of the setDmzCfg function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component of the TOTOLINK A8000RU router’s software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Wavlink WL-NU516U1 OTA Arbitrary Command Execution

The vulnerability of the otanewupgrade function in the /cgi-bin/adm.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

Malicious code in react-dom-v17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55f6e35ab09a2fcd6521dac51aa4baa4cfa726958bc266a0d56fc14de240a29 Package name impersonates the widely-used react-dom package react-dom-v17. package.json declares preinstall: node index.js, which fires automatically...

MAL-2026-10207 Malicious code in react-dom-v17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55f6e35ab09a2fcd6521dac51aa4baa4cfa726958bc266a0d56fc14de240a29 Package name impersonates the widely-used react-dom package react-dom-v17. package.json declares preinstall: node index.js, which fires automatically...

CVE-2026-59260

OpenWrt luci-app-samba4 contains an ACL misconfiguration that grants file.exec permission on /usr/sbin/smbd. This allows authenticated delegated users to execute the Samba daemon with caller-controlled command-line arguments, enabling remote code execution via the SMB processing path. The vulnera...

Malicious code in eth-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3131490d64c4ae90de2926ca90f6fce23e6a113d1e6538db5ce98ffcf06983d1 The top-level ethagent/init.py performs an outbound HTTP fetch to a hardcoded IPFS gateway URL...