CVE-2026-13493 AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend/controller/conversationapi.py of the component Workflow Checkpoint Restore Handler. Executing a manipulation can lead to improper control of resource identifiers. The atta...

PT-2024-39579 · M Files · M-Files Connector For Copilot

Name of the Vulnerable Software and Affected Versions: M-Files Connector for Copilot versions prior to 24.9.3 Description: The issue allows an authenticated user to bypass permissions and access a limited amount of documents due to an incorrect access control list calculation. Recommendations: Fo...