Evading Chain-Of-Thought Monitoring through Model Poisoning

Chain-of-thought CoT monitoring is an increasingly important component of AI safety stacks but relies on the assumption that a model's reasoning trace is informative about its actions. This work studies the limits of CoT monitoring through the lens of model poisoning. We demonstrate that backdoor...

PT-2026-67144

A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get file list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer...

Agentic Incident Response through Digital Twin-Enhanced Multiscale Planning

Incident response is currently managed by security operators using predefined playbooks, resulting in slow, labor-intensive security decision-making processes. Consequently, there is a growing need for automated incident response planning. Decision-theoretic approaches based on control,...

Antares: Foundation Models for Agentic Vulnerability Localization

Vulnerability localization is a fundamental step in software security, requiring models to reason over large codebases and iteratively identify vulnerable implementations. We present Antares, a family of compact language models 350M, 1B, and 3B parameters for agentic vulnerability localization...

allennlp (>=2.2.0, <=2.2.1.dev20210406), allennlp-models (2.2.0) +14 more potentially affected by CVE-2026-9856 via transformers (4.4.2)

transformers PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.0, =1.0.0, =0.1.0, =0.1.0, =0.15.4rc0, =0.0.6, =0.0.1, =1.6.6, =1.7.1 and more Source cves: CVE-2026-9856 Source advisory:...

allennlp (1.3.0), allennlp-models (1.3.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.0.1)

transformers PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 1.3.0 - allennlp-models 1.3.0 - indic-punct =2.0.7, =1.0.0.dev0, =0.6.1.dev0, =0.6.9 Source cves: CVE-2026-9856 Source advisory...

bluecore-models (>=0.11.1, <=0.25.0), orilinx (1.0.1) potentially affected by CVE-2026-9856 via transformers (4.57.5)

transformers PYPI version 4.57.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bluecore-models =0.11.1, =0.25.0 - orilinx 1.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aiu-fms-testing-utils (0.0.2a3), pathology-foundation-models (>=0.0.2, <=0.0.4) +1 more potentially affected by CVE-2026-9856 via transformers (4.54.0)

transformers PYPI version 4.54.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiu-fms-testing-utils 0.0.2a3 - pathology-foundation-models =0.0.2, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory:...

allennlp (>=2.8.0, <=2.9.0.dev20211215), allennlp-models (2.8.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.12.5)

transformers PYPI version 4.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.8.0, =0.0.1rc158945962037, =0.1.2, =0.0.12, =0.0.0.116399031, =0.0.0.116461994 - transformers-embedder 1.8.2 Source cves:...

allennlp (>=2.5.1.dev20210625, <=2.6.0), allennlp-models (>=2.5.0.dev20210603, <=2.6.0) +16 more potentially affected by CVE-2026-9856 via transformers (4.8.2)

transformers PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.1.dev20210625, =2.5.0.dev20210603, =0.0.1rc19, =0.1.5, =0.0.2, =0.0.4, =0.2.0, =0.12.3, =0.1.0, =0.1.1, =0.2.3, =0.2.0,...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-9856 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

allennlp (>=2.0.2.dev20210210, <=2.1.0), allennlp-models (>=2.0.0rc1, <=2.1.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.3.3)

transformers PYPI version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.0.2.dev20210210, =2.0.0rc1, =0.0.3, =0.1.0a1, =0.0.1, =0.1.1, =0.0.4, =0.7.0, =0.0.0, =1.0.0, =1.6.5 Source cves:...

allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2026-9856 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (>=1.0.0rc6.dev20200602, <=1.1.0rc1.dev20200706), allennlp-models (>=1.1.0rc1.dev20200630, <=1.1.0rc1.dev20200706) +6 more potentially affected by CVE-2026-9856 via transformers (2.10.0)

transformers PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200602, =1.1.0rc1.dev20200630, =0.0.6, =2.7.3, =0.2.15, =0.2.0, =0.3.0 Source cves: CVE-2026-9856 Source...

adamix-gpt2 (>=0.0.1, <=0.0.2), allennlp (>=1.2.0rc1.dev20200930, <=1.2.0rc1.dev20201021) +6 more potentially affected by CVE-2026-9856 via transformers (3.3.1)

transformers PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adamix-gpt2 =0.0.1, =1.2.0rc1.dev20200930, =1.2.0rc1.dev20201007, =0.0.1, =0.5.0, =0.1.11, =0.1.12 - mc-transformers 0.1.11 Source cves:...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-9856 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

allennlp (>=1.0.0rc6.dev20200604, <=1.1.0rc1.dev20200709), allennlp-models (>=1.0.0rc6, <=1.1.0rc1.dev20200709) +29 more potentially affected by CVE-2026-9856 via transformers (2.11.0)

transformers PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200604, =1.0.0rc6, =0.0.1rc1, =0.1.2, =0.1.3, =0.5.2, =0.1.2, =3.0.1, =0.1.0, =1.8.0, =0.12.2.dev2, =0.12.2.dev...

A Multimodal Automatic Redteaming Evaluation Based on Atomic Jailbreak Strategy Decoupling and Combination

Multimodal Large Language Models MLLMs have achieved impressive progress in image-text comprehension and generation, yet they remain susceptible to jailbreak attacks that can trigger harmful outputs and pose serious safety concerns. Existing multimodal jailbreak attacks have shown the feasibility...

Decoy Images Amplify Caption-Mediated Defenses against Encoded Jailbreaks

We report a counter-intuitive interaction between image inputs and existing black-box defenses on Vision--Language Models VLMs: pairing an encoded jailbreak prompt with an unrelated decoy image can sharply lower attack success rate ASR. The operative change is in the defense pipeline, not in the...

Security-First Evaluation of Text-To-Terraform: Benchmarking LLMs and SLMs for Secure IaC Generation

Cloud misconfiguration remains a leading cause of security incidents, yet whether LLMs and SLMs can generate security-compliant Infrastructure-as-Code is an open question. We benchmark seven models, three closed LLMs Claude Opus 4, GPT-5.4, Gemini 2.5 Pro and four open SLMs Qwen2.5-Coder-14B,...