CVE-2026-25116

Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the UserConfigController allows any remote user to overwrite the system's docker-compose.yml configuration file. By exploiting insecure URN...

CVE-2026-25116

Runtipi (homeserver orchestrator) is vulnerable in versions 4.5.0–4.7.1 due to an unauthenticated Path Traversal in UserConfigController caused by insecure URN parsing, allowing remote overwrite of docker-compose.yml and resulting in full Remote Code Execution and host filesystem compromise upon ...

Auto-GPT 代码注入漏洞

Auto-GPT is an artificial intelligence software agent program open-sourced by Significant Gravitas. A code injection vulnerability exists in Auto-GPT versions prior to 0.4.3, which stems from a docker-compose.yml file located in the repository root directory that installs itself into a docker...