CVE-2026-77930

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

EUVD-2026-104687

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

EUVD-2026-104685

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the...

CVE-2026-75128

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the...

CVE-2026-75128 Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the...

CVE-2026-75128 Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the...

CVE-2026-75128

Langchain-Chatchat versions through 0.3.1.3 are vulnerable to unauthenticated Remote Code Execution (RCE) due to a missing authentication check on the POST /tools/call API endpoint. This endpoint allows the invocation of any registered tool by name; specifically, the shell tool is always register...

CVE-2026-109443

JoySafeter versions up to and including 1.0.0 are vulnerable to a remote code execution (RCE) flaw. The issue stems from an unsandboxed execute tool within Copilot standard mode , where the agent can be manipulated to invoke subprocess.run with shell=True on the host system. Authenticated attacke...

CVE-2026-109443 JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell

JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the...

EUVD-2026-104680

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attacke...

CLEANSTART-2026-GD45765 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`

CVE-2026-9277 affects multiple packages. shell-quote's quote function did not validate object-token inputs against the operator model used by parse. See references for individual vulnerability details...

PT-2026-117937

Name of the Vulnerable Software and Affected Versions piflow versions 2.0.0 through 2.0.1 Description The DeepAgents chat agent contains a flaw allowing remote code execution. The 'POST /chat' and 'POST /chat/stream' endpoints lack authentication, enabling attackers to instruct the agent to call...

PT-2026-118483

Name of the Vulnerable Software and Affected Versions Apache CouchDB versions prior to 3.5.3 Description An unvalidated runtime configuration value allows a server administrator to execute arbitrary shell commands with the privileges of the CouchDB operating system user. Recommendations Upgrade t...

PT-2026-117949

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start...

PT-2026-117935

Name of the Vulnerable Software and Affected Versions LangAlpha versions prior to 2026.09.07 Description An indirect prompt injection allows remote attackers to execute shell commands or Python by placing instructions within web content retrieved by the agent. This occurs because the Bash and...

Joern 4.0.661

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Ginlix AI LangAlpha security vulnerability

Ginlix AI LangAlpha versions 2026.09.07 and earlier contain a security vulnerability stemming from indirect prompt injection. Due to the absence of allowlists and manual approvals for Bash and ExecuteCode, attackers can insert commands into web pages retrieved by the proxy, thereby executing shel...

PT-2026-118361

Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...

PT-2026-117939

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell run commands without confirmation because the headless presenter's execution allowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by...

PT-2026-117947

Name of the Vulnerable Software and Affected Versions Langchain-Chatchat versions prior to 0.3.1.4 Description The software exposes a POST '/tools/call' API endpoint that allows the invocation of any registered tool by name without authentication. Because the shell tool is registered by default,...