Live threat intelligence radar

A security researcher discovered a method to bypass the AWS MCP Python sandbox restrictions in the aws___run_script tool, which executes user-supplied Python code in a restricted AWS Lambda environment. The sandbox uses AST validation and runtime proxy objects to block dangerous operations, including attribute access and imports. However, the researcher found that Python's structural pattern matching (match/case) can implicitly read attributes listed in __match_args__, bypassing the sandbox's attribute access restrictions. By assigning __match_args__ to sensitive dunder attributes and constructing attribute names at runtime, the researcher achieved sandbox escape and system command execution within the Lambda environment.

CVE-2026-116046 is a path traversal vulnerability in the eventcatalog sdk affecting versions up to 2.29.0. The flaw exists in the Custom Documentation Helpers component, specifically in the functions getCustomDoc, writeCustomDoc, and rmCustomDoc. It allows manipulation of the options.path argument to traverse directories on the local host. The issue is resolved by upgrading to version 2.30.0.

CVE-2026-116045 is a path traversal vulnerability in 1999AZZAR designer-mcp up to version 2.1.0. It affects the get_reference function in the MCP Interface component, allowing remote attackers to manipulate the argument Name to perform path traversal. The vulnerability has a medium severity with a CVSS score of 5.3. A patch identified by commit c8c2951dcbed9b1710a745993f028317f10a3f10 is available and applying it is advised.

A privilege management vulnerability exists in the Duplicator WordPress plugin versions 1.5.17 up to but not including 5.0.0. The plugin's one-click upgrade routine is not properly restricted and can be accessed without authentication. This allows an administrator of a multisite child site, who is not a network administrator, to execute arbitrary PHP code in the shared plugin directory across the network.

The Datawiza Proxy Auth Plugin for WordPress before version 1.1.1 has an improper privilege management vulnerability. It fails to verify that user-identity and role HTTP headers originate from a trusted reverse proxy. This flaw allows unauthenticated attackers to create and authenticate as WordPress administrators.

The Qi Addons For Elementor WordPress plugin before version 1.11.2 contains a vulnerability where it does not properly sanitize a widget's heading text after decoding HTML entities. This flaw allows users with Contributor role or higher to embed live HTML forms, including password fields that submit data to external hosts, into posts where WordPress normally strips such content.

InstaWP Connect WordPress plugin versions before 0.1.4.2 lack proper authorization checks on the settings update action. This allows authenticated users with low-privileged roles, granted access to the sync feature by an administrator, to overwrite plugin settings, including role access controls. The role grant is not enabled by default.

The WPVR WordPress plugin versions 8.3.0 up to but not including 9.0.3 have an authorization bypass vulnerability. This flaw allows users with contributor-level access or higher to update virtual tours created by other users without proper ownership checks. As a result, unauthorized modification, reconfiguration, and publishing of other users' virtual tours is possible.

The WPVR WordPress plugin versions 9.0.0 through 9.0.2 contain an authorization bypass vulnerability. This flaw allows users with contributor-level access or higher to read and modify virtual tours created by other users due to missing object-level authorization checks. The issue is fixed starting from version 9.0.3.

A missing authorization vulnerability in the WPVR WordPress plugin before version 9.1.3 allows users with the Contributor role and above to create and publish tour content via the setup wizard. This flaw permits these users to set arbitrary post metadata that they would not normally be authorized to create or publish.