Threat database

answer-me-with-html versions up to 0.5.0 have a link following vulnerability in the am CLI code block src embedding. The localPath() function does not resolve symbolic links, allowing attackers to include symlinks pointing outside the repository. This can cause external files to be embedded into generated HTML and disclosed when shared. The vulnerability has a low CVSS score and no known exploits in the wild.

CVE-2026-108722 is a stored cross-site scripting (XSS) vulnerability in the e2b-dev open-computer-use project. The flaw exists in the Logger.write_log_file function in os_computer_use/logging.py, which writes transcript text into log.html without proper HTML escaping. This allows attackers who control sandbox content, such as web pages or files shown in run_command output, to inject malicious scripts. These scripts execute when an operator opens the log, potentially exfiltrating transcript contents. The vulnerability has a low CVSS score of 2.3 and is present in version 0 of the product. No patch or remediation information is provided.

Open Computer Use through version 1.0.0 on macOS has a vulnerability involving improper handling of case sensitivity in bundle identifiers. This flaw allows local MCP callers to bypass the password-manager denylist by using case-variant bundle identifiers. Exploiting this, attackers can access sensitive functions such as reading accessibility trees, capturing screenshots, and controlling unlocked password manager interfaces. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.8.

LLMGateway versions up to 1.20.0 contain a blind server-side request forgery (SSRF) vulnerability. This flaw allows API key holders to send requests to internal hosts by exploiting the video-generation callback_url extension. The vulnerability bypasses the assertSafeWebhookTarget check, enabling attackers to reach loopback, private, or cloud metadata URLs from the worker's network.

Rill Data rill versions 0.77.0 through 0.90.5 have a missing authorization vulnerability in the admin OAuth server. This flaw allows attackers to register clients with the long_lived_access_token scope without user consent. By tricking a user into authorizing such a client, attackers can obtain a non-expiring API token with the user's full permissions.

Combodo iTop versions 3.1.0 through 3.3.0 have a missing authorization vulnerability in LinkSetController.php. Authenticated console users can bypass profile grants by manipulating class and key parameters, enabling unauthorized deletion, detachment, and reading of object attributes. The vulnerability has a medium severity with a CVSS score of 5.3.

punkpeye mcp-remote versions 0.8.0 through 0.14.3 have a vulnerability where sensitive information such as client secrets and tokens are transmitted in cleartext if non-HTTPS endpoints are used. This allows on-path attackers to capture these credentials during device authorization and token exchange.

CVE-2026-108714 is a high-severity vulnerability in the modelcontextprotocol kotlin-sdk up to version 0.15.0. It involves uncontrolled memory allocation due to the lack of a maxFrameSize limit in the WebSocket implementation. This allows remote attackers to send frames with payloads near 2 GiB, causing excessive heap allocations and denial of service.

Plastic Labs Honcho versions up to 3.3.0 have an incorrect authorization vulnerability that allows API key holders with peer- or session-scoped permissions to access workspace data they should not be able to read. The vulnerability arises because the get_or_create_workspace function only verifies the workspace claim, enabling attackers to submit a parent workspace name to the POST /v3/workspaces endpoint and retrieve metadata and configuration reserved for higher privilege keys.

NornicDB versions up to 1.4.1 have a missing authorization vulnerability that allows authenticated users with viewer roles to bypass per-database read restrictions on specific endpoints. This enables such users to retrieve node IDs, labels, and full property maps from databases they are allowlisted for but explicitly denied read access.

CVE-2026-108576 is a critical OS command injection vulnerability in the TOZED X300 device, specifically in the IPPingDiagnostics Handler's process_ping function. It affects versions 6.01.0 through 6.01.3. The vulnerability allows remote attackers to inject arbitrary OS commands by manipulating the Host argument. The vendor has not responded to disclosure attempts, and no patch or mitigation guidance is currently available.

CVE-2026-108575 is a medium severity vulnerability in BerriAI LiteLLM up to version 1.94.0. It involves improper authorization in the get_secret function of the Secret Resolution component, specifically in secret_managers/main.py. The vulnerability arises from manipulation of the api_key argument, allowing remote attackers to bypass authorization controls. The issue has been publicly disclosed, but the vendor has not responded or provided a fix.

CVE-2026-108574 is an authorization bypass vulnerability in BerriAI LiteLLM versions up to 1.95.0. The flaw exists in the ui_view_session_spend_logs function of the Spend Tracking component, where manipulation of the session_id argument can bypass authorization checks. This vulnerability can be exploited remotely. An exploit has been published. Upgrading to version 1.96.0 resolves the issue.

CVE-2026-108573 is an out-of-bounds read vulnerability in the Open Asset Import Library (Assimp) affecting versions 6.0.0 through 6.0.5. The flaw exists in the IOStreamBuffer::getNextBlock function within the PLY File Handler component. This vulnerability can be triggered remotely by manipulating input, potentially leading to reading memory outside the intended bounds. The vendor has not responded to disclosure requests, and no patch or fix information is currently available.

CVE-2026-108572 is a server-side request forgery (SSRF) vulnerability in Casdoor affecting versions 3.164.0 and 4.0 through 4.10.0. The vulnerability exists in the CasP3ProxyValidate function within the controllers/cas.go file, where manipulation of the pgtUrl argument can lead to SSRF. The issue can be exploited remotely. A public exploit disclosure exists. Upgrading to version 4.11.0 addresses this vulnerability.

CVE-2026-108571 is a SQL injection vulnerability in Xinhu Rainrock RockOA affecting versions 2.7.0 through 2.7.6. The flaw exists in the function kqjcmdModel::returnchuli within the file webmain/task/openapi/openkqjAction.php. This vulnerability allows remote attackers to manipulate the ID argument to perform SQL injection. Public exploit code is available, and the vendor has not responded to the disclosure.

CVE-2026-108570 is a medium severity vulnerability in Furion .NET Framework up to version 4.9.9.95. It involves improper neutralization of special elements in the template engine's RunCompile function, allowing remote attackers to manipulate template content. The vendor has not responded to disclosure, and no patch information is available. Exploit code has been publicly released.