dify

Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers to execute arbitrary SQL by supplying unsanitized search parameters to the search_by_full_text method without escaping or parameterization. Attackers can inject malicious SQL through the search parameters to read, modify, or delete data in the underlying ClickHouse database.

CVE Database V5

Detailed information about CVE-2026-61461: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in langgenius dify affecting lan

CVE-2026-61461: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in langgenius dify - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-61461: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in langgenius dify

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP allows Command Line Execution through SQL Injection.

This issue affects SEM-PMP: through 23042026.

Detailed information about CVE-2026-5801: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in Semtek Informatics Soft

CVE-2026-5801: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-5801: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP

Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token, and the ACS finish logic in api/src/backend/api/v1/views.py recalculated the tenant from user.email instead of binding token issuance to the validated SAML configuration. An authenticated attacker with a controlled SAML IdP could complete a valid SAML flow for an attacker-controlled domain while asserting an email address from another configured domain, causing a SAMLToken and tenant-scoped JWT to be issued for the wrong tenant and enabling cross-tenant account takeover. This issue is fixed in version 5.30.3.

Detailed information about CVE-2026-59151: CWE-287: Improper Authentication in prowler-cloud prowler affecting prowler-cloud prowler. Get real-time updates, tec

CVE-2026-59151: CWE-287: Improper Authentication in prowler-cloud prowler - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-59151: CWE-287: Improper Authentication in prowler-cloud prowler

Three high-severity vulnerabilities were discovered and patched in the OpenClaw AI assistant, affecting its host execution environment. These flaws include operating system command injection and path traversal issues that could allow unauthorized code execution, privilege escalation, and credential theft. The vulnerabilities were demonstrated to enable host code execution triggered by an external WhatsApp message under documented deployment configurations. The issues have been addressed in OpenClaw version 2026.6.6. Mitigations include updating to the patched version, enabling sandbox mode for non-main sessions, restricting tool allowlists, and limiting feature exposure to trusted operators.

Three high-severity vulnerabilities in OpenClaw were disclosed, involving OS command injection with incomplete input filtering (GHSA-hjr6-g723-hmfm and GHSA-9969-8g9h-rxwm, CVSS 8.8 each) and a path traversal with bind mount bypass of directory denylist checks (GHSA-575v-8hfq-m3mc, CVSS 8.4). These flaws could allow attackers to execute arbitrary code on the host, escalate privileges, and steal credentials by bypassing sandbox restrictions. The path traversal vulnerability allows mounting parent directories like /home or /var, exposing sensitive files and Docker socket access. The vulnerabilities were exploited via AI agent workflows, including WhatsApp messages triggering host code execution. All issues are fixed in OpenClaw 2026.6.6. Operators are advised to restrict affected features, enable sandboxing, and narrow tool allowlists to reduce risk.

Reddit Cybersecurity

Detailed information about Three high-severity OpenClaw vulnerabilities highlight emerging AI agent security risks. Get real-time updates, technical details, an

Three high-severity OpenClaw vulnerabilities highlight emerging AI agent security risks - Live Threat Intelligence - Threat Radar | OffSeq.com

I recently disclosed three high-severity vulnerabilities affecting OpenClaw that have now been patched in version 2026.6.6. The research looks at different parts of an AI agent execution workflow, including environment variable handling, Git operations, and container isolation. One of the demonstrations shows how, under the documented deployment configuration, a seemingly legitimate WhatsApp message can ultimately lead to host-side code execution. The goal wasn't just to find bugs, but to better understand how AI agents behave as they're given access to developer tools, messaging platforms, repositories, and local execution environments. The research was published today by The Hacker News: <a href="https://thehackernews.com/2026/07/researcher-details-whatsapp-to-host.html" target="_blank" rel="noopener noreferrer nofollow">https://thehackernews.com/2026/07/researcher-details-whatsapp-to-host.html</a> I also published a technical deep dive covering the attack scenarios, root causes, and mitigations: <a href="https://medium.com/@chinmohannayak/i-sent-a-whatsapp-message-to-an-ai-agent-it-ran-my-code-on-the-host-adbbcbb0e0ad" target="_blank" rel="noopener noreferrer nofollow">https://medium.com/@chinmohannayak/i-sent-a-whatsapp-message-to-an-ai-agent-it-ran-my-code-on-the-host-adbbcbb0e0ad</a> GitHub Security Advisories: <ul> <li><a href="https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm" target="_blank" rel="noopener noreferrer nofollow">https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm</a></li> <li><a href="https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm" target="_blank" rel="noopener noreferrer nofollow">https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm</a></li> <li><a href="https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc" target="_blank" rel="noopener noreferrer nofollow">https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc</a></li> </ul>

I recently disclosed three high-severity vulnerabilities affecting OpenClaw that have now been patched in version 2026.6.6.
 The research looks at different parts of an AI agent execution workflow, including environment variable handling, Git operations, and container isolation. One of the demonstrations shows how, under the documented deployment configuration, a seemingly legitimate WhatsApp message can ultimately lead to host-side code execution.
 The goal wasn't just to find bugs, but to better understand how AI agents behave as they're given access to developer tools, messaging platforms, repositories, and local execution environments.
 The research was published today by The Hacker News:
 https://thehackernews.com/2026/07/researcher-details-whatsapp-to-host.html
 I also published a technical deep dive covering the attack scenarios, root causes, and mitigations:
 https://medium.com/@chinmohannayak/i-sent-a-whatsapp-message-to-an-ai-agent-it-ran-my-code-on-the-host-adbbcbb0e0ad
 GitHub Security Advisories:
 https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm
 https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm
 https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc

Three high-severity OpenClaw vulnerabilities highlight emerging AI agent security risks

Reddit Discussion: Three high-severity OpenClaw vulnerabilities highlight emerging AI agent security risks

https://medium.com/@chinmohannayak/i-sent-a-whatsapp-message-to-an-ai-agent-it-ran-my-code-on-the-host-adbbcbb0e0ad

https://github.com/openclaw/openclaw/security/advisories/GHSA-hjr6-g723-hmfm

https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm

https://github.com/openclaw/openclaw/security/advisories/GHSA-575v-8hfq-m3mc

Detailed information about CVE-2026-6872. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-6872

CVE-2026-6872

Technical Details

Community Reviews

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility

CVE-2026-6872

CVE-2026-6872

Technical Details

Community Reviews

Related Threats

CVE-2026-61461: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in langgenius dify

CVE-2026-5801: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP

CVE-2026-59151: CWE-287: Improper Authentication in prowler-cloud prowler

CVE-2026-57476: CWE-306 Missing Authentication for Critical Function in Deloitte AI Assist for Customer

CVE-2026-57475: CWE-306 Missing Authentication for Critical Function in Deloitte AI Assist for Customer

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility