PT-2026-53122

Unauthenticated Remote Code Execution via Jobs API and Approval Bypass in PraisonAI Summary An unauthenticated attacker can execute arbitrary OS commands on any server running the PraisonAI Jobs API by submitting a crafted workflow YAML. The attack chains two weaknesses: the /api/v1/runs endpoint...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.2.0), org.kie.kogito:integration-tests-jobs-service-quarkus-knative-eventing (>=1.33.0.final, <=1.34.0.final) +15 more potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.2.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

io.quarkus:quarkus-keycloak-admin-client (1.4.1.final), io.quarkus:quarkus-keycloak-admin-client-deployment (1.4.1.final) +6 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.4.1.final)

io.quarkus:quarkus-oidc MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-admin-client 1.4.1.final - io.quarkus:quarkus-keycloak-admin-client-deployment...

CVE-2016-6345

It was found that there was insufficient use of randam values in RESTEasy async jobs. An attacker could use this flaw to steal user data. Mitigation Dont enable Async Jobs Service as details in the section, "2.10. RESTEASY ASYNCHRONOUS JOB SERVICE" of JBoss EAP 7 Developing Web Services...