PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

CVE-2026-47394

## Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four

历史摘要 · 未重新核验 · GitHub Advisory

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

### Impact Stigmem nodes configured with authentication disabled could grant the anonymous identity broad read/write/fed

历史摘要 · 未重新核验 · GitHub Advisory

Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024

CVE-2026-47233

## Summary Commit `d37ca6b27b9674238e58491cf7ba292e66898f15` ("Delete item not check admin rights #2024", 2026-04-12) a

历史摘要 · 未重新核验 · GitHub Advisory

Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges

CVE-2026-47226

### Summary An authenticated Admidio member with upload rights on **any one folder** can permanently delete files from

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to...

CVE-2026-49385

In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service account

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration...

CVE-2026-49374

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

CVE-2026-49367

In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

历史摘要 · 未重新核验 · GitHub Advisory

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, FreeScout allows a non-admin user to permanently delete an internal note (pr...

CVE-2026-48811

FreeScout 是一款基于 PHP Laravel 框架的免费帮助台和共享收件箱系统。在版本 1.8.221 之前，存在一个权限绕过漏洞：非管理员用户能够永久删除任意对话中的内部笔记（私有线程），即使该用户对包含该对话的邮箱的访问权限已

历史摘要 · 未重新核验 · NVD

In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts

CVE-2026-49385

In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service account

历史摘要 · 未重新核验 · NVD

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

CVE-2026-49378

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

历史摘要 · 未重新核验 · NVD

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

CVE-2026-49374

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

历史摘要 · 未重新核验 · NVD

In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

CVE-2026-49367

In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

历史摘要 · 未重新核验 · NVD

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, Currencies and Carriers exposed inline toggles and per-record actions (enable,...

CVE-2026-47745

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, Currencies and Carrie

历史摘要 · 未重新核验 · NVD

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in the product editor (Edit, Inventory, Seo, Shipping, Files) had no authorizatio...

CVE-2026-47742

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in the product editor (E

历史摘要 · 未重新核验 · NVD

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Order shipments table were callable by an authenticated low...

CVE-2026-47740

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Or

历史摘要 · 未重新核验 · NVD

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/{id}/templates/variables endpoint, which writes ...

CVE-2026-47125

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/envi

历史摘要 · 未重新核验 · NVD

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule router does not enforce organization/role checks. As a result, any authenticat...

CVE-2026-45632

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule router does not enfor

历史摘要 · 未重新核验 · NVD

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, Arcane's huma-based REST API exposes nine endpoints under /api/customize/g...

CVE-2026-45625

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, Arcane's huma-bas

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity. Non-approver users ...

CVE-2026-35630

OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to

历史摘要 · 未重新核验 · NVD