EUVD-2026-10810

MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained downloadpath in confluencedownloadattachment...

CVE-2025-6280

A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function downloadattachment of the file SuperAGI/superagi/helper/reademail.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal...

CVE-2025-6280

CVE-2025-6280 affects TransformerOptimus SuperAGI up to 0.0.14. The vulnerability resides in EmailToolKit’s read_email.py function download_attachment, where manipulating the filename argument enables path traversal. The exploit has been publicly disclosed. Practical impact is exposure to arbitra...