Threat database

A critical vulnerability (CVE-2026-108753) exists in agnaistic agnai versions up to 1.0.555 due to hard-coded credentials in the self-host.docker-compose.yml file. This flaw allows unauthenticated attackers to log in as admin or forge JWT tokens with admin privileges, enabling user impersonation, password resets, and server configuration changes.

MoAI-ADK versions up to 3.1.2 have an improper link resolution vulnerability in the moai init template deployer. This flaw allows malicious repositories to overwrite files outside the intended project directory by exploiting symlinked staging paths. Specifically, attackers can create symlinks that cause atomicWriteFile to overwrite victim-writable files with template content. The vulnerability has a medium severity rating and a CVSS score of 4.8.

Quarkus LangChain4j versions 1.9.0 through 1.14.1 have a memory leak vulnerability in the chat-scopes WebSocket /_chat/routes endpoint. Unauthenticated remote clients can exploit this by sending repeated CONNECT frames with the same chatId, causing orphaned scopes to accumulate in memory until the JVM exits, leading to degraded server availability.

CloudBeaver versions up to 25.3.5 have a missing authorization vulnerability in the WebSQLResultServlet component. This flaw allows any authenticated web session user to access and download other users' LOB export files stored in a shared folder. Attackers can enumerate table and column names and guess timestamps to retrieve large object data from database connections they are not authorized to query. The vulnerability has a low CVSS score of 2.3 and does not appear to be actively exploited in the wild.

pbi-cli versions 3.10.1 through 3.12.0 have an OS command injection vulnerability in the desktop_sync.py component. The issue arises because unquoted .pbip file paths containing special characters like '&' are passed to the Windows command shell (cmd /c start) when reopening projects. This allows attackers to execute arbitrary commands with the victim's privileges if the victim opens a crafted Power BI project file. The vulnerability has a CVSS 4.0 score of 7.3, indicating high severity.

CloudBeaver versions up to 25.3.5 contain a missing authorization vulnerability in the initConnection GraphQL mutation. This flaw allows view-only shared-project members to persist credentials without having datasource-edit permissions. Attackers can manipulate flags to have other users connect to the shared connection using the attacker's database identity.

Shepherd (shepherd-ai) versions up to 0.3.1 contain a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the citation-checker extra. This flaw allows attackers who control DNS for a crafted reference URL to bypass server-side request forgery (SSRF) protections by causing the system to re-resolve hostnames at request time, potentially sending unauthorized GET requests to internal HTTP(S) services and capturing responses.

GoatCounter versions up to 2.7.0 have a privilege escalation vulnerability in the userPrefSave handler. This flaw allows logged-in users with read-only access to modify protected account fields by sending specially crafted form-encoded requests. Specifically, attackers can escalate their privileges to superuser or admin by posting parameters that bypass read-only restrictions.

OpenAgents Workspace backend version 0 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via an API endpoint. This exposure reveals sensitive data including unmasked API keys, workspace IDs, slugs, creator emails, and member lists. The vulnerability has a high severity score of 8.7.

Speedtest Tracker versions up to 1.15.0 have an IP allowlist bypass vulnerability. This flaw allows unauthenticated remote attackers to spoof X-Forwarded-For headers to bypass ALLOWED_IPS and Prometheus allowlists. The vulnerability arises because the application trusts every peer as a proxy, enabling attackers to access protected metrics and web/API endpoints.

Frappe CRM versions 1.49.0 through 1.87.0 have a missing authorization vulnerability in the crm.api.doc.get_linked_docs_of_document function. This flaw allows authenticated users to access linked documents without proper permission checks, potentially exposing sensitive information such as call log phone numbers, deal organizations, and mention notification text. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3.

Frappe HR (hrms) versions before 16.11.0, including all 14.x and 15.x releases up to 15.64.3, have a missing authorization vulnerability in the expire_allocation method. This flaw allows authenticated users without HR roles to expire any employee's leave allocation by sending a specially crafted POST request, effectively zeroing out the targeted employee's remaining leave balance.

Frappe HR (hrms) versions before 16.11.0, including all 14.x and 15.x releases through 15.64.3, have a missing authorization vulnerability in the whitelisted get_account_and_amount method. This flaw allows authenticated users without HR roles to access payroll information of other employees by calling the method via the /api/method endpoint with enumerable Salary Slip or claim document names. The disclosed data includes net pay and balances for loans, advances, and claims. The vulnerability has a CVSS 4.0 score of 5.3, indicating medium severity.

Raven versions 2.0.0 through 3.0.0 have a missing authorization vulnerability that allows authenticated users with the Raven User role to bypass the can_only_join_via_invite setting. This enables them to join invite-only Public workspaces without an invitation, gaining persistent membership and the ability to read and post in Public and Open channels.

Raven versions 2.0.0 through 3.0.0 have a missing authorization vulnerability in legacy API methods that bypass workspace membership checks. This allows authenticated users who are not members of a workspace to access public channel history and file metadata by using predictable channel IDs. The vulnerability affects the methods get_messages_with_dates and get_all_files_shared_in_channel.

Corteza versions up to 2024.9.10 have an incorrect authorization vulnerability in the compose attachment endpoints. This flaw allows unauthenticated attackers to download private attachments by manipulating the URL kind segment to page, icon, or namespace. Attackers with knowledge of a private record or module attachment ID can access original or preview files without requiring a token or signature, bypassing namespace and record permission boundaries. The vulnerability has a high severity with a CVSS score of 8.2.

Flyte versions 2.0.1 through 2.0.51 have a vulnerability where secrets are stored in cleartext within Pod environment variables. This allows users with Pod read access to decode sensitive secrets from the SECRETS environment variable, bypassing Secret store access controls.

EdgeEver versions up to 1.108.0 have a missing authorization vulnerability in the Hono API memo-template routes. This flaw allows users with scoped API tokens lacking certain permissions to bypass token scope restrictions and perform unauthorized actions such as creating memos and modifying templates within the token owner's workspace.

GLPI versions up to and including 12.0.0 contain a missing authorization vulnerability in ajax/map.php. This flaw allows authenticated low-privileged users to bypass the canView() check and search itemtypes they normally cannot view. Exploitable itemtypes include Contact, Supplier, Contract, and Budget, enabling attackers to retrieve match counts, titles, and coordinates within their entities. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3.

Cheshire Cat AI core versions up to 2.0.23 have a stored cross-site scripting (XSS) vulnerability in the uploads plugin. Authenticated users can upload HTML files without type restrictions via POST /uploads. This allows attackers to craft URLs that execute scripts in the application origin when visited by signed-in users, potentially exposing their access_token cookies, including those of administrators.