Runaway Reaction: When Benign Skills Compose into Malicious Behavior

Agent skills package task-specific knowledge and procedures that can be composed to support complex agent tasks, while p

历史摘要 · 未重新核验 · arXiv cs.CR

Agentic-ZTA: A Multi-Agent Architecture for Autonomous Zero Trust Enforcement

Agentic AI is emerging as a promising paradigm for automating complex cybersecurity decisions, yet its use in enforcing

历史摘要 · 未重新核验 · arXiv cs.CR

What a Policy Gate Can and Cannot Know: Measured Boundaries of Cross-Platform Command Adjudication

Gateways that adjudicate an agent's actions before they execute are only as good as their understanding of the action. W

历史摘要 · 未重新核验 · arXiv cs.CR

Trusted Hardware Acceleration for Malicious-Secure Function Secret Sharing

Function secret sharing (FSS) underlies two-party private inference and private information retrieval, with cost dominat

历史摘要 · 未重新核验 · arXiv cs.CR

PoCoFL: POlicy-COmpliant Federated Learning

Federated Learning (FL) is a privacy-oriented learning paradigm that enables collaborative model training while keeping

历史摘要 · 未重新核验 · arXiv cs.CR

Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

CVE-2026-105639

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for an

历史摘要 · 未重新核验 · OSV.dev

Plane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute force

CVE-2026-105638

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric

历史摘要 · 未重新核验 · OSV.dev

Plane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)

CVE-2026-105637

Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/vie

历史摘要 · 未重新核验 · OSV.dev

Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Token

CVE-2026-105635

Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/proje

历史摘要 · 未重新核验 · OSV.dev

Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Roles

CVE-2026-105634

Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows a

历史摘要 · 未重新核验 · OSV.dev

Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

CVE-2026-105633

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id

历史摘要 · 未重新核验 · OSV.dev

Plane: Broken Access Control - joinProject GraphQL mutation allows self-join into private (secret) projects

CVE-2026-105632

Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace mem

历史摘要 · 未重新核验 · OSV.dev

Oversized Dockerfile or .dockerignore can exhaust buildkitd memory

CVE-2026-93323

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limi

历史摘要 · 未重新核验 · OSV.dev

Plane: asset download endpoints scope file lookups to the workspace (not the project / published entity) → cross-project & unauthenticated private-file disclosure

CVE-2026-105631

Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownlo

历史摘要 · 未重新核验 · OSV.dev

Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)

CVE-2026-105630

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, includ

历史摘要 · 未重新核验 · OSV.dev

Malformed MergeOp can crash the BuildKit daemon

CVE-2026-93322

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds

历史摘要 · 未重新核验 · OSV.dev

Plane: Cross-Tenant Destructive IDOR: Estimate Point Deletion via Unscoped Primary Key Lookup

CVE-2026-105629

Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate

历史摘要 · 未重新核验 · OSV.dev

Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpoint

CVE-2026-105628

Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avata

历史摘要 · 未重新核验 · OSV.dev

BuildKit improperly handles special files in build snapshots

CVE-2026-93320

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special

历史摘要 · 未重新核验 · OSV.dev

Plane: Cross-tenant stored XSS in intake enables account takeover

CVE-2026-104979

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes

历史摘要 · 未重新核验 · OSV.dev