Grida versions up to 0.0.24 have a missing authorization vulnerability in the Forms file-preview API routes. This flaw allows unauthenticated attackers to access form response files belonging to other organizations by leveraging exposed form and field IDs to generate signed URLs for attachments and Supabase bucket objects.
A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function execute_code of the file im_client/agents/tools/code_executor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-121880 is an authorization bypass vulnerability in Posit Software, PBC's RStudio Server and Posit Workbench before version 2026.08.0. It allows remote authenticated users on the same multi-user server to access web applications and services bound to localhost under other users' sessions via a proxy URL using a user-controlled port token. The vulnerability arises because the port token is only an obfuscation measure and not an authorization boundary, and the proxy does not verify port ownership. Exploitation requires an authenticated account and a target service listening on localhost. The issue is fixed in version 2026.08.0.
CVE-2026-121881 is an SQL injection vulnerability in Posit Software, PBC Posit Workbench versions before 2026.08.0. It affects the get_last_seen code-server session-state RPC, allowing authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. Exploitation requires a valid authenticated session but does not require administrative privileges. The vulnerability is limited to disclosure of database contents and does not allow modification or deletion of data.
CVE-2026-123786 is a server-side request forgery (SSRF) vulnerability in Agenta-AI's agenta product versions before 0.122.5. It allows workspace members with workflow edit permissions to redirect workflow invocations by setting arbitrary revision URLs. This can lead to unauthorized access to internal resources and secrets by capturing the Authorization token used for secret resolution. The vulnerability is fixed in version 0.122.5.
Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeight so the column loop never terminates, causing sustained CPU use and denial of service at startup.
Fluxbox versions up to 1.3.7 contain an OS command injection vulnerability in the RootTheme::reconfigTheme() function. This flaw allows attackers to execute arbitrary commands by crafting style background values that include shell metacharacters. These malicious inputs are concatenated without proper escaping into an fbsetbg command executed via the shell when the style loads.
Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the is_safe_script_code AST denylist and import blocked modules such as subprocess or socket to run code in the Skyvern server process.
CVE-2026-123782 is an authorization bypass vulnerability in zhimaAi's ChatWiki versions before 2.10.0. It allows authenticated users to modify form fields belonging to other tenants by exploiting insecure direct object references in SaveFormField and UpdateFormRequired functions. Attackers can manipulate form_id and form_field id parameters to alter field attributes such as names, descriptions, types, and required flags, potentially disrupting data storage for submitted entries. The issue is fixed in version 2.10.0.
ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify other tenants' fast commands by supplying arbitrary sequential ids to POST /manage/saveFastCommand. Attackers can overwrite another tenant's command title, type, content and robot binding, redirecting webpage-jump commands to attacker URLs and reassigning the record to their own tenant.
Usermin versions up to 2.570 contain a cross-site scripting (XSS) vulnerability in the mailbox/detach.cgi component. This flaw allows remote attackers to execute arbitrary scripts by manipulating the 'type' parameter, bypassing JavaScript filtering. Exploitation involves sending an HTML attachment with script and tricking users into clicking a crafted detach.cgi link, enabling script execution within the victim's authenticated Usermin session.
Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outside the temporary directory via unsanitized attachment filenames. Attackers can email attachments with ../ sequences in filenames, and when the recipient downloads all attachments, files like ~/.forward are overwritten, enabling command execution.
Usermin versions up to 2.570 contain an OS command injection vulnerability in the Read Mail module. Authenticated users can exploit this by creating IMAP folders with shell metacharacters via an external IMAP client. When these folders are deleted in Usermin, the unsanitized folder names allow execution of arbitrary system commands, bypassing webmail-only restrictions.
Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows attackers to escape the project directory by supplying drive-letter paths that cleanup_path does not normalise. Attackers can use a malicious web page with cross-site requests or DNS rebinding against the unauthenticated local server to recursively delete directories via deleterecord or write attacker-controlled files via newattachment.
ABP Framework versions before 10.7.1 have an authentication bypass vulnerability. This flaw allows attackers who possess the external directory password for accounts that are deactivated, locked, or protected by two-factor authentication to bypass account state and 2FA checks. By exploiting the registered IExternalLoginProvider, attackers can successfully obtain valid access tokens via the /connect/token password grant endpoint. The vulnerability is fixed in version 10.7.1.
Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups by passing JSON objects in the id parameter. Attackers can send MongoDB query operators such as $ne or $gt to POST /api/user to select and enumerate other users' public profile records.
SiYuan versions before 3.8.9 have a nil pointer dereference vulnerability in the privateCacheMiddleware component. Authenticated attackers with a valid API token can exploit this by sending a specific resources/read request in an initialized MCP session, causing the kernel process to panic and terminate, resulting in service interruption. This vulnerability is fixed in version 3.8.9.
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: arguments on eager-loadable nodes absent from the public schema are copied into EagerLoadPlan criteria without cleansing. Unauthenticated attackers can supply a parenthesized select argument to inject SQL expressions and read arbitrary database content, including password hashes and session tokens.
Craft CMS versions from 5.8.17 up to but not including 5.11.2 contain a privilege escalation vulnerability. The flaw exists because the getOwners() function applies caller-supplied criteria without properly sanitizing the query configuration. This allows authenticated control panel users to execute attacker-selected static PHP callables, potentially promoting any account to administrator privileges. The vulnerability has a high severity score of 8.7 and was fixed in version 5.11.2.
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulnerability because the sandbox-exposed getNext() and getPrev() methods pass arbitrary criteria arrays to Craft::configure() without removing SQL-bearing properties such as orderBy and where. Authenticated control panel users can supply a crafted elementIds value, rendered as a sandboxed template, to obtain a conditional SQL oracle under the Craft database account.