EUVD-2026-24506

nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated attackers to set or change a session workspace to an arbitrary existing directory on disk by manipulating workspace path parameters in endpoints such as /api/session/new, /api/session/update,...

PT-2020-13332

Name of the Vulnerable Software and Affected Versions Little Snitch versions 4.5.1 and older Description The issue allows a user to escalate to root by manipulating a directory path controlled by the user, which can be linked to a directory containing code executed by root. Recommendations For...