Open WebUI: Stored XSS to Account Takeover via Model Profile Images

CVE-2026-54013

# Stored XSS to Account Takeover via Model Profile Images in Open WebUI **Affected:** Open WebUI ` tags. On the output

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

CVE-2026-54012

## Summary Open WebUI lets a user who can create, update, or import workspace models store arbitrary `meta.knowledge` e

历史摘要 · 未重新核验 · GitHub Advisory

Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo

CVE-2026-26231

## Summary Any authenticated low-privilege user with read access to a repository can push arbitrary commits directly to

历史摘要 · 未重新核验 · GitHub Advisory

Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication

CVE-2026-28699

### Summary Gitea fails to enforce OAuth2 access token scopes when the token is submitted via HTTP Basic authentication

历史摘要 · 未重新核验 · GitHub Advisory

Gogs: Overwriting critical files results in a denial of service

CVE-2026-52797

**Vulnerability type:** Path Traversal **Impact:** DoS **Exploitation prerequisite:** authorized user **Description:** A

历史摘要 · 未重新核验 · GitHub Advisory

Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens

CVE-2026-28744

### Summary Gitea v1.26.1 enforces repository-scoped access-token permissions on repository operations. In the Git Smart

历史摘要 · 未重新核验 · GitHub Advisory

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

CVE-2026-54304

## Impact An authenticated user with permission to create or modify workflows and access to a SecurityScorecard credenti

历史摘要 · 未重新核验 · GitHub Advisory

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

CVE-2026-54309

## Impact When `@n8n/mcp-browser` is run in HTTP transport mode, the MCP endpoint accepts session initialization and too

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

CVE-2026-54305

## Impact Three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without perf

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Credential Exfiltration via Permission Bypass

CVE-2026-54307

## Impact A member-level user with editor access to a shared workflow could reference credentials they do not own via sp

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Stored XSS in Chat Trigger Node

CVE-2026-54302

## Impact An authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's gene

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Microsoft SQL Node Prototype Pollution

CVE-2026-54312

## Impact An authenticated user with permission to create or modify workflows could achieve global prototype pollution v

历史摘要 · 未重新核验 · GitHub Advisory

yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

### Summary yt-dlp's `--exec` option is vulnerable to arbitrary command injection when handling untrusted metadata if th

历史摘要 · 未重新核验 · GitHub Advisory

The device has a webserver that exposes a REST API authenticated with a constant token. The...

CVE-2026-22312

The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be u

历史摘要 · 未重新核验 · GitHub Advisory

In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was...

CVE-2026-10303

In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated ag

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host...

CVE-2026-53864

OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that all

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command...

CVE-2026-53866

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authent

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution...

CVE-2026-53865

OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with...

CVE-2026-53857

OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata c

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace...

CVE-2026-53858

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .env STATE_DIRECTORY c

历史摘要 · 未重新核验 · GitHub Advisory