CVE-2026-13060

Technical details are not publicly available in the provided documents. The supplied materials do not specify affected products/components, root cause, or remediation. Monitor for updates.

PT-2026-25128

Summary For host=node runs, approvals validated command context but did not pin executable identity for non-path-like argv0 tokens for example tr. If PATH resolution changed after approval, execution could run a different binary. Impact A previously approved action could execute a different...