PraisonAI has an Arbitrary File Write in Python API
CVE-2026-47397
# Bug Report: Arbitrary File Write in Python API ## Summary Hidden metadata in a webpage causes PraisonAI agents to wr
#severity:high
共收录 5509 条相关情报。
← 返回所有主题PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate
CVE-2026-47394
## Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four
PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334
CVE-2026-47398
Arbitrary code execution via ungated spec.loader.exec_module in agents_generator.py (v4.6.32 chokepoint refactor bypass)
formie's unauthenticated front-end submission editing can overwrite existing submissions
CVE-2026-47266
### Impact Unauthenticated users could modify existing submissions by posting a known or guessed submission ID to `formi
stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment
### Impact A single configuration flag could disable plugin signature enforcement. If an operator unintentionally carrie
stigmem-node's Postgres schema identifier handling required defensive quoting
### Impact Postgres backend schema identifiers were interpolated into SQL strings. In the reviewed code path the schema
stigmem-node's federation peer token timestamp validation may reject valid peer tokens
### Impact A mismatch in federation peer-token timestamp handling could cause valid peer tokens to be treated as expired
Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders
CVE-2026-47231
## Summary `modules/documents-files.php` gates state-changing modes by checking that the actor has `hasUploadRight()` o
Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in...
CVE-2026-48557
Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanit
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection...
CVE-2026-49373
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
CVE-2026-49366
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration...
CVE-2026-49374
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
CVE-2026-49371
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
CVE-2026-49367
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
CVE-2026-49368
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
CVE-2026-49372
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with...
CVE-2026-42941
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password c
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
CVE-2026-42929
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env
CVE-2026-47211
### Impact A Remote Code Execution (RCE) vulnerability was discovered in Ouroboros. If a user clones a malicious reposit
authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user
CVE-2026-47201
### Summary authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstream SAM