FinRobot version 1.0.0 contains a critical code injection vulnerability in the function CodingUtils.create_file_with_code(). This vulnerability allows an attacker to execute arbitrary code remotely without any privileges or user interaction. The vulnerability has a CVSS score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability.
FinRobot version 1.0.0 contains a code injection vulnerability in the CodingUtils.modify_code function. This vulnerability allows an attacker to inject and execute arbitrary code, potentially leading to confidentiality, integrity, and availability impacts. The vulnerability has a high severity rating with a CVSS score of 7.3. No affected versions beyond 1.0.0 are explicitly stated, and no patch or remediation information is currently available.
TransformerOptimus SuperAGI v0.0.14 has an access control vulnerability in the delete_user_knowledge function. This flaw allows unauthenticated users to delete knowledge objects via a POST request without verifying ownership or authentication.
TransformerOptimus SuperAGI version 0.0.14 contains an incorrect access control vulnerability in its tool controller. The functions get_tool and update_tool do not verify organization ownership of tool IDs, allowing a remote authenticated attacker from one organization to read or modify another organization's tool metadata. This vulnerability has a critical severity with a CVSS score of 9.8.
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in its agent template controller. The functions save_agent_as_template and publish_template accept user-supplied agent_id or agent_execution_id parameters without verifying that these belong to the authenticated user's organization. This flaw allows unauthorized users with limited privileges to access or manipulate agent templates outside their organization.
Vanna version 2.0.2 contains a critical code injection vulnerability in the VannaBase.get_plotly_figure function. This flaw allows an attacker to execute arbitrary code or commands depending on the exposed entry point. The vulnerability has a CVSS score of 9.8, indicating high severity with network attack vector, no privileges required, and no user interaction needed.
CVE-2026-51907 is a path traversal vulnerability in TaskingAI v0.3.0's QR Code Generator plugin. The flaw exists in the save_base64_image function, where manipulation of the project_id parameter allows attackers to write image files to arbitrary locations on the server filesystem. This vulnerability has a high severity rating with a CVSS score of 8.1, indicating significant impact on integrity and availability. No patch or remediation information is currently provided.
CVE-2026-51906 is a critical path traversal vulnerability in TaskingAI v0.3.0, specifically in the DALL-E 3 image generation tool's save_url_image function. This flaw allows attackers to manipulate the project_id parameter to write downloaded images to arbitrary locations on the server filesystem. The vulnerability has a high CVSS score of 9.1, indicating severe confidentiality and integrity impacts without availability impact. No patch or official fix information is currently provided.
SuperAGI versions up to 0.0.14 have an improper access control vulnerability in the agent execution controller. The functions create_agent_execution and create_agent_run do not verify that the agent_id provided by the caller belongs to the authenticated user's organization. This allows a remote authenticated attacker to create or start execution records for agents owned by other organizations.
SuperAGI versions up to 0.0.14 contain an incorrect access control vulnerability in the /api/agentexecutions/schedule endpoint. Authenticated users can schedule agents belonging to other organizations without proper authorization checks, potentially leading to unauthorized access and control over those agents. This vulnerability has a high severity rating with a CVSS score of 8.1.
SuperAGI versions 0.0.14 and earlier contain an authorization vulnerability in several controller endpoints that manage agents. Authenticated users can manipulate agents belonging to projects outside their own organization due to lack of proper project ownership verification. This allows cross-organization modification of agent scheduling and deletion without direct data confidentiality impact.
sinaptik-ai pandas-ai version 3.0.0 contains a critical code injection vulnerability in the CodeExecutor.execute function. This vulnerability allows an attacker to execute arbitrary code remotely without any privileges or user interaction. The flaw is identified as CWE-94 and has a CVSS score of 9.8, indicating a severe risk to confidentiality, integrity, and availability.
CVE-2026-86345 is a critical vulnerability in Red Hat Directory Server 11 where the server improperly handles buffered plaintext bytes during StartTLS negotiation. This flaw allows an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade, causing the client to potentially treat a failed authentication attempt as successful due to message ID collision.
A large-scale phishing operation has deployed 70 fraudulent websites impersonating legitimate cryptocurrency projects including xStocks from Kraken, Pendle, Zama, Kinetiq, Yield Basis, and Firelight. The fake sites closely replicate authentic platforms and lure visitors with offers to vote on rewards distribution dates in exchange for a 1.25x boost. Upon clicking the vote button, users encounter a wallet connection prompt that ultimately leads to malicious authorization requests designed to drain cryptocurrency tokens. The targeted projects were strategically selected based on recent token launches, airdrops, or active rewards programs, making the phishing attempts appear credible to community members. All malicious domains follow the pattern 'sitemu' followed by random characters on the .xyz domain, suggesting a coordinated campaign using shared infrastructure and phishing kits.
The spo365-graph package on PyPI contains malicious code introduced in version 1.1.2 that executes during installation. This code deploys a rogue AWS Lambda function designed to collect credentials from AWS Secret Manager and exfiltrate other sensitive data. The package overrides the install command in setup.py to carry out these malicious actions.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the openshell packages to address multiple vulnerabilities identified by CVE-2026-102821, CVE-2026-102823, and CVE-2026-102824. The update includes new versions of openshell, openshell-gateway, and python3-openshell RPMs for aarch64 and x86_64 architectures. No explicit details on the nature of the vulnerabilities or their impact are provided in the advisory. The advisory does not list any fixed versions prior to these updates, indicating these RPM versions contain the security fixes.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the caddy package to version 2.11.6-0.1.hum1. This update addresses the vulnerability identified as CVE-2026-81871. The advisory does not specify the nature of the vulnerability beyond referencing CWE-295, which relates to improper certificate validation. No explicit fix version is stated beyond the updated package version.
In July 2026, China-aligned threat actor TA419 conducted credential phishing campaigns impersonating prominent economists and AI policymakers, targeting AI experts at US think tanks, universities, and legal organizations. The group sent benign conversation starter emails themed around AI policy topics, such as invitations to join an AI Policy Advisory Committee. Upon receiving responses, TA419 deployed multi-stage URL redirection chains leading to Adversary-in-the-Middle credential phishing pages using a customized Frameless Browser-in-the-Browser tool. Active since April 2025, TA419 consistently targets individuals at US and Japan-based think tanks, defense contractors, universities, and law firms. This activity likely supports Chinese intelligence objectives to monitor US AI policy and regulatory developments amid strategic competition involving AI technologies, model distillation concerns, and export controls between the US and China.
Podman versions from 4.4.0 up to but not including 5.8.8, and from 6.0.0 up to but not including 6.1.3, contain a vulnerability where podman run treats images with the io.podman.annotations.checkpoint.runtime.name annotation as checkpoints. This causes podman to ignore user-supplied container creation restrictions such as --cap-drop=ALL, potentially allowing weaker sandbox settings and capabilities. Rootless containers are not affected. The issue is fixed in versions 5.8.8 and 6.1.3.
RAGFlow version 0.24.0 has an improper access control vulnerability in the get_dataset function within the evaluation_app API. This flaw allows an attacker to execute arbitrary code or commands if they can access the vulnerable entry point. The vulnerability is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
