utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol
CVE-2026-45369
## Summary The `_substitute_utcp_args` method in `cli_communication_protocol.py` inserts user-controlled `tool_args` va
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题Marten has an injection vulnerability in its full-text search regConfig parameter
CVE-2026-45288
## Summary Marten's full-text search APIs interpolated the user-supplied `regConfig` parameter directly into the genera
@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation
### Summary A critical identity spoofing vulnerability in MCPHub allows any unauthenticated user to impersonate any oth
Electerm Local code through electerm's single-instance socket
CVE-2026-45353
### Impact _Local code execution without UI interaction: any same-user process can send a JSON payload to electerm's sin
DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files
CVE-2026-45374
### Summary The `task_create` tool spawns durable sub-agents that inherit two insecure defaults: - `allow_shell` defau
DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval
CVE-2026-45311
### Summary The `run_tests` tool executes `cargo test` in the workspace with `ApprovalRequirement::Auto`, meaning it ru
Strapi Vulnerable to SQL Injection in Content Type Builder
CVE-2026-22599
### Summary of CVE-2026-22599 Vulnerability Details - CVE: CVE-2026-22599 - CVSS v3.1 Vector: `CVSS:4.0/AV:N/AC:L/AT:N/
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This...
CVE-2026-42945
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists w
SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution
CVE-2026-45375
### Summary SiYuan's Bazaar (community marketplace) renders the `name` and `version` fields of a package's `plugin.json
Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy
CVE-2026-45083
### Summary The Goobi viewer REST endpoint `POST /api/v1/index/stream` accepted an arbitrary Solr streaming expression
Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server
## Summary If you have the MCP Server ID, you can connect to the MCP server even if you don't have permissions to the s
Mapfish Print: Remote Code Injection (RCE) in Dynamic table
CVE-2026-44672
### Impact The attacker can execute arbitrary code without being authenticated ### Mitigation Upgrade to a patched ve
SillyTavern has a Path Traversal issue
CVE-2026-44650
## Summary `POST /api/extensions/delete` endpoint accepts `extensionName: "."` which bypasses `sanitize-filename` vali
SillyTavern has Authentication Bypass via SSO Header Injection
CVE-2026-44649
## Resolution SillyTavern 1.18.0 now includes a configuration option to limit which IP addresses can authorize using SS
esm.sh: Legacy Route Path Traversal Can Lead to RCE
CVE-2026-44593
### Impact - Arbitrary File Write – An attacker can cause the server to write data to any file path it has write permiss
Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in...
CVE-2026-45185
Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing p
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space...
CVE-2026-8430
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certa
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of...
CVE-2026-34659
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerabili
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect...
CVE-2026-34660
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that c
OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input
CVE-2026-42074
### Summary The `dangerouslyDisableSandbox` parameter is exposed as part of the BashTool input schema, meaning the LLM (