Lucene search
+L

5 matches found

OSV
OSV
•added 2026/09/15 3:18 p.m.•15 views

CVE-2026-91987 atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

7.1CVSS5.7AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/15 3:18 p.m.•15 views

EUVD-2026-78658

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

7.1CVSS5.7AI score0.00476EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/17 9:50 p.m.•17 views

GHSA-J659-8XH6-5PQ5 atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

estimatebatchcost atomicagents/agent.py looks up the per-model output price with PRICING.getmodel, , returning 0.0 for any model not in the hardcoded pricing table. checkbatchreservation then early-returns when the reservation is 0 and that an over-cap unknown-model batch raises...

8.7CVSS5.3AI score0.00476EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/10/18 12:00 a.m.•137 views

Extreme ExtremeXOS (EXOS) Detection Consolidation

Consolidation of Extreme ExtremeXOS EXOS detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/07/30 12:00 a.m.•24 views

Epson Printer Detection Consolidation

Consolidation of Epson Printer device detections. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder