mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

GHSA-r9hw-mj3w-phcq CVE-2026-35361 LOW 25 days ago

uutils calls `mknod` *before* setting the SELinux context (GNU uses `setfscreatecon` first, labeling atomically). If `set_selinux_security_context`...

cargo

No PRs yet

mkfifo: permissions of an existing file are changed after FIFO creation fails

GHSA-pmf6-rcx4-v53v CVE-2026-35341 HIGH 25 days ago

When `mkfifo()` fails (e.g. target already exists), the code shows an error but is missing a `continue;`, so it falls through to `fs::set_permissio...

cargo

No PRs yet

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

GHSA-qrwj-vh9x-gw5v HIGH 25 days ago

### Summary `agentConn.apiClient()` used the default redirect behavior of `http.Client` while its custom transport dialed the host from the reques...

go

No PRs yet

OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export

GHSA-cgfv-jrfp-2r7v HIGH 25 days ago

## Summary The datapoint export API builds a PostgreSQL crosstab export query by concatenating asset display names into raw SQL. An authenticated ...

maven

No PRs yet

Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

GHSA-473p-56xx-vg67 CVE-2026-55630 LOW 25 days ago

## Summary In Kiwi TCMS the fields `TestCase.extra_link` and `TestPlan.extra_link` were meant to represent URLs to external resources however in v...

pypi

No PRs yet

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

GHSA-7cfm-pqrj-xgq7 CVE-2026-55501 HIGH 25 days ago

## Summary The 9router dashboard login rate limiter derives the client identity from the attacker-controlled `X-Forwarded-For` HTTP header. When 9...

npm

No PRs yet

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover

GHSA-qvfm-67h2-2qfx CVE-2026-55500 CRITICAL 25 days ago

## Summary The `/api/settings/database` endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) an...

npm

No PRs yet

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

GHSA-f74w-488g-8x5r CVE-2026-55794 HIGH 25 days ago

### Requirements: * Control panel access * Permissions to edit an entry ### Details Control panel users with the ability to edit entries can exe...

packagist

No PRs yet

Craft CMS: Stored XSS via Structure entry title in table view

GHSA-xrqc-p465-2xvg CVE-2026-55793 MODERATE 25 days ago

# Stored XSS via Structure entry title in table view ## Summary An Author-level control panel user can store a JavaScript payload in an entry tit...

packagist

No PRs yet

Craft CMS: Sensitive File Disclosure / Server-Side File Read

GHSA-287w-mxq6-x2cp CVE-2026-55792 MODERATE 25 days ago

The `dataUrl()` Twig function is included in Craft’s Twig sandbox allowlist, allowing any control panel user granted the `utility:system-messages` ...

packagist

No PRs yet

Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

GHSA-24x4-j6x9-rfw5 CVE-2026-55790 HIGH 25 days ago

## Summary An attacker with only a GitHub account can plant a JavaScript payload in a `craftcms/cms` issue title. When a Craft admin uses the Craf...

packagist

No PRs yet

Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpoint

GHSA-hmj5-jm8h-h9fh CVE-2026-54724 MODERATE 25 days ago

### Summary An open redirect vulnerability in the account confirmation endpoint allows an unauthenticated attacker to craft a URL hosted on a legi...

pypi

No PRs yet

Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

GHSA-ww9q-8r59-xv46 CVE-2026-54496 CRITICAL 25 days ago

### Summary A soundness vulnerability in the variable-base scalar multiplication gadget of `halo2_gadgets` allowed a malicious prover to produce a...

cargo

No PRs yet

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

GHSA-2pq5-3q89-j7cc CVE-2026-55615 CRITICAL 25 days ago

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gat...

pypi

No PRs yet

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

GHSA-vjc7-jrh9-9j86 CRITICAL 25 days ago

--- title: Unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats product: 9Router version: <= 0.4.41 severity: critical...

npm

No PRs yet

Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

GHSA-5wg6-jmq2-53pw CVE-2026-55438 MODERATE 25 days ago

### Summary Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment ...

go

No PRs yet

Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

GHSA-798h-hpph-m24j CVE-2026-55426 HIGH 25 days ago

### Summary When a check plugin places user provided input inside a command which is passed to `shell_exec`, an attacker can abuse this to run arbi...

pypi

No PRs yet

Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

GHSA-7qw2-f75v-62f7 CVE-2026-55437 MODERATE 25 days ago

### Summary The `AgentLogLine` dashboard component instantiated `ansi-to-html` without `escapeXML: true` and inserted the result via `dangerouslyS...

go

No PRs yet

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

GHSA-84rm-42xw-mx52 CVE-2026-55436 HIGH 25 days ago

### Summary The AI Bridge Proxy (`aibridgeproxyd`) created a goproxy server whose default transport set `InsecureSkipVerify: true` and only assign...

go

No PRs yet

Suspended Coder users retain access to AI Bridge LLM proxy endpoints

GHSA-wqxv-w64v-5wh6 CVE-2026-55435 MODERATE 25 days ago

### Summary AI Bridge proxy endpoints authenticate via `Server.IsAuthorized` in `coderd/aibridgedserver`, which validates key format, expiry, secr...

go

No PRs yet

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

GHSA-f5vp-w269-392g CVE-2026-55434 MODERATE 25 days ago

### Summary AI Bridge provider handlers read request bodies with `io.ReadAll` without a maximum size so an authenticated user with AI Bridge acces...

go

No PRs yet

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

GHSA-jqj2-x4c5-jfxm CVE-2026-55433 MODERATE 25 days ago

### Summary The devcontainer recreate endpoint relied on route middleware that checked only `ActionRead` on the workspace and, unlike the sibling ...

go

No PRs yet

Coder's sub-agent app registration bypasses template port-sharing policy enforcement

GHSA-x9qq-2qh5-8rxf CVE-2026-55432 MODERATE 25 days ago

### Summary The `CreateSubAgent` RPC did not validate a requested app sharing level against the template's `MaxPortSharingLevel` before persisting...

go

No PRs yet

Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

GHSA-v54h-cp2w-9x4g CVE-2026-55431 HIGH 25 days ago

### Summary `coder open app` opens external workspace-app URLs without validating the scheme or host. When an external app URL contains the `$SESS...

go

No PRs yet

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

GHSA-2mg2-p7r7-g27f CVE-2026-55078 MODERATE 25 days ago

### Summary `POST /api/v2/files` converts zip uploads to tar in memory via `CreateTarFromZip`, which enforced a per-entry size limit but no aggreg...

go

No PRs yet

Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

GHSA-5g4w-3vw9-478w CVE-2026-55430 MODERATE 25 days ago

### Summary The workspace app proxy resolves the target app from `httpapi.RequestHost()` which prefers the `X-Forwarded-Host` header over the real...

go

No PRs yet

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

GHSA-wrq8-fcv5-8hvp CVE-2026-55428 HIGH 25 days ago

### Summary The tailnet coordinator validates that an agent's `Addresses` derive from its authenticated UUID but applies no equivalent check to `A...

go

No PRs yet

Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

GHSA-9rjw-3gwp-f59v CVE-2026-55429 HIGH 25 days ago

### Summary `UpsertWorkspaceApp` overwrites an existing app's `agent_id` on a primary-key conflict and `insertAgentApp` accepts the app ID from th...

go

No PRs yet

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

GHSA-f962-qm93-mj4c CVE-2026-55079 MODERATE 25 days ago

### Summary `NewDataBuilder` in `provisionersdk/proto/dataupload.go` allocated a byte slice using the client-supplied `FileSize` from a `DataUploa...

go

No PRs yet

Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

GHSA-mcqq-fqgf-rxwm CVE-2026-55427 HIGH 25 days ago

### Summary `coder config-ssh` wrote server-supplied SSH settings (`HostnameSuffix`, `SSHConfigOptions`) into the user's `~/.ssh/config` without s...

go

No PRs yet

Coder: User-admin role can reset owner account password

GHSA-29xf-69gq-m9jx CVE-2026-55077 HIGH 25 days ago

### Summary The `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resett...

go

No PRs yet

Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass

GHSA-9r87-mvcw-x35f CVE-2026-55075 HIGH 25 days ago

### Summary Two flaws in Coder's OIDC login chained into account takeover: email-based user matching fell back to linking by email without checkin...

go

No PRs yet

Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking

GHSA-75vm-6w67-gwvp CVE-2026-55076 HIGH 25 days ago

### Summary Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean...

go

No PRs yet

OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory

GHSA-7v6w-c3f4-9wpq CVE-2026-54640 HIGH 25 days ago

### Summary The fix for CVE-2026-40882 addressed only the Velbus asset import handler. The KNX asset import handler (`KNXProtocol`) processes user-...

maven

No PRs yet

OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl

GHSA-xqr9-4wvv-gvch CVE-2026-54641 HIGH 25 days ago

### Summary A realm admin of tenant B can read the profile, client roles, and realm roles of any user in any other realm (including the master rea...

maven

No PRs yet

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

GHSA-q6h5-q3q6-f87x CVE-2026-53935 MODERATE 25 days ago

### Impact Users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, which enables hijacki...

go

No PRs yet

GoFiber never set HSTS header in helmet middleware due to incorrect protocol check

GHSA-gv83-gqw6-9j2c CVE-2026-53624 MODERATE 25 days ago

### Summary The `helmet` middleware in gofiber/fiber never sets the `Strict-Transport-Security` (HSTS) response header, even when `HSTSMaxAge` is ...

go

No PRs yet

Langroid: handle_message() executes user-supplied tool JSON without sender verification

GHSA-gjgq-w2m6-wr5q CVE-2026-54771 HIGH 25 days ago

## Summary A Langroid application exposing a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads, even when t...

pypi

No PRs yet

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

GHSA-q9p7-wqxg-mrhc CVE-2026-54769 CRITICAL 25 days ago

### Advisory Details **Title**: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent **Description**: ### ...

pypi

No PRs yet

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

GHSA-6xc5-4r68-67fc CVE-2026-54760 CRITICAL 25 days ago

# SQLChatAgent `_validate_query` dangerous-pattern regex is bypassable via quoted/commented/qualified function names ## Summary The `SQLChatAgent...

pypi

No PRs yet

Dragonfly scheduler v1 and v2 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile

GHSA-chwm-m7g7-685g CVE-2026-54637 MODERATE 25 days ago

## Summary The Dragonfly **scheduler**'s v1 gRPC service contains an unauthenticated Server-Side Request Forgery (SSRF). When a peer reports a suc...

go

No PRs yet

Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases

GHSA-r35r-fpx2-jgr4 CVE-2026-53759 LOW 25 days ago

### Summary The SQLite databases are created at predictable (static) paths in `/tmp`. Any user can therefore create a symlink at these paths in /tm...

pypi

No PRs yet

Craft CMS: Authenticated "assets/preview-thumb" discloses signed fallback transform preview link to CP users without asset-view permission

GHSA-x76w-8c62-48mg MODERATE 25 days ago

### Summary A user with Control Panel access but without permission to view a target private asset can call `assets/preview-thumb` and receive pre...

packagist

No PRs yet

Decompress: Archive extraction can create files and links outside of the target directory

GHSA-mp2f-45pm-3cg9 CVE-2026-53486 CRITICAL 25 days ago

### Impact When extracting an archive to a directory, a crafted archive can read or write files outside that directory. The flaw is in the code th...

npm

1

Dependabot PRs

printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)

GHSA-p7h3-7q52-72w8 CVE-2026-35366 MODERATE 25 days ago

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitr...

cargo

No PRs yet

uucore: safe_traversal TOCTOU protection only enabled on Linux

GHSA-w6xc-g9qj-vp32 CVE-2026-35362 LOW 25 days ago

The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-des...

cargo

No PRs yet

mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)

GHSA-h444-6j9x-p8vh CVE-2026-35365 MODERATE 25 days ago

When moving directories across filesystems, uutils `mv` dereferences symlinks inside the tree, copying their targets as real files/dirs instead of ...

cargo

No PRs yet

cp: -R reads device nodes as streams, destroying device semantics

GHSA-8vrf-r662-2w2v CVE-2026-35358 MODERATE 25 days ago

The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device nodes as stream sources ra...

cargo

No PRs yet

rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection

GHSA-89p7-7cq3-hhr2 CVE-2026-35363 MODERATE 25 days ago

`rm -rf .` is correctly refused, but `clean_trailing_slashes` normalizes `.///` to `./` while `path_is_current_or_parent_directory` only matches `....

cargo

No PRs yet

comm: FIFO/pipe inputs are drained before comparison (data loss / hang)

GHSA-3wfc-mgpm-9rq6 CVE-2026-35347 MODERATE 25 days ago

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The are_files_...

cargo

No PRs yet