A prototype pollution vulnerability exists in digitalbazaar forge versions prior to 1.4.1. The forge.http client improperly stores cookie names and paths from Set-Cookie headers in plain JavaScript objects, allowing a malicious server to manipulate Object.prototype properties via specially crafted cookie names such as __proto__ or constructor. This can lead to modification or deletion of inherited properties. The issue is fixed in version 1.4.1.
CVE-2026-103094 is an information disclosure vulnerability in the ServiceNow AI Platform where a user's plaintext OAuth credentials could be stored in a system table. This unintended persistence could expose sensitive passwords to unauthorized users. ServiceNow has released security updates in multiple patches across their Zurich, Yokohama, Xanadu, and Australia releases to remediate this issue. No known exploitation in the wild has been reported. Users are advised to apply the provided patches promptly.
A vulnerability in digitalbazaar's forge library (prior to version 1.4.1) involves improper input validation of PKCS#7 padding during CBC and ECB mode decryption. The library only validated the final byte of padding and accepted malformed padding, which could lead to silent removal of up to four plaintext blocks. This causes an integrity failure in applications relying on successful decryption as proof of valid padding. The issue is fixed in version 1.4.1.
CVE-2026-118775 is an integer overflow vulnerability in the digitalbazaar forge library prior to version 1.4.1. The flaw exists in the asn1.oidToDer() function, which did not properly range-check the first two arcs of an Object Identifier (OID). This could allow an application that accepts and authorizes an untrusted OID string to encode a DER representation that differs from the authorized OID. The vulnerability is fixed in version 1.4.1.
The react-native-drago-callkit npm package contains malicious code that can fully compromise any computer on which it is installed or running. This compromise may allow an attacker to gain full control over the affected system. Immediate removal of the package is recommended, but due to the potential for persistent malicious software, complete remediation may require additional measures such as rotating all secrets and keys from a different, secure computer.
A cryptographic signature verification flaw exists in digitalbazaar's forge library versions prior to 1.4.1. The vulnerability involves improper verification of the signature scheme, where the library incorrectly uses the issuer certificate's RSA padding and RSASSA-PSS parameters instead of those from the child certificate. This could allow a child certificate labeled as RSASSA-PSS to be accepted with a PKCS#1 v1.5 signature if the issuer uses PKCS#1 v1.5. The flaw does not allow certificate identity forgery but may bypass policies enforcing specific signature schemes. The issue is resolved in version 1.4.1.
SuperAGI versions up to 0.0.14 have an improper access control vulnerability in the agent controller endpoint /api/agents/get/project/{project_id}. This flaw allows authenticated users from one organization to access the full list of agents belonging to projects of other organizations, due to lack of verification that the project_id belongs to the user's organization. The issue is fixed in version 0.0.15.
SuperAGI version 0.0.14 has an improper access control vulnerability in the get_agent_by_latest_execution function. This flaw allows a remote authenticated attacker from one organization to access the latest execution and agent metadata of another organization's project by providing the victim's project ID via a specific API endpoint.
TransformerOptimus SuperAGI version 0.0.14 has an incorrect access control vulnerability in the get_agent_execution_configuration function. This flaw allows a remote authenticated attacker from one organization to access another organization's agent execution configuration by providing specific agent and execution IDs. The affected endpoint does not verify organization ownership, leading to unauthorized data exposure.
OpenBMB XAgent version 1.0.0 contains a directory traversal vulnerability in the main-upload_file function located in ToolServer/ToolServerNode/main.py at line 46. This vulnerability could allow an attacker to access files outside the intended directory structure.
DB-GPT versions 0.7.5 and 0.8.0 contain a directory traversal vulnerability in the use_example_file function. This flaw allows a remote attacker to write files outside the intended workspace or storage boundary by exploiting the path validation. No patch or remediation information is provided.
HashiCorp Nomad and Nomad Enterprise contain a vulnerability allowing authenticated users with read permissions in one namespace to bypass authorization controls and view information in other namespaces via several read-only API endpoints. This issue is identified as CVE-2026-102260 and has a medium severity rating. The vulnerability is fixed in Nomad Community Edition 2.1.0 and Nomad Enterprise versions 2.1.0, 1.11.12, and 1.10.18.
HashiCorp Nomad and Nomad Enterprise contain a vulnerability involving symlink following during dispatch payload and executor log writes. This flaw allows a malicious workload to modify files outside its allocated directory. If the Nomad client agent runs with root privileges, exploitation could lead to root code execution on the client host. The vulnerability is tracked as CVE-2026-107347 and has a high severity rating with a CVSS score of 8.4. Fixed versions include Nomad 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, and 1.10.18.
The socket.getaddrinfo() function previously accepted null bytes within the host and port parameters, which could cause these values to be silently truncated. This behavior may lead to unexpected processing of network addresses.
modelscope agent-zero versions 1.7, 1.8, 1.9, and 1.10 contain a directory traversal vulnerability in the save_text_file method of python/helpers/file_browser.py. This method improperly handles user-supplied file paths without normalization or validation, allowing attackers to write files outside the intended directory.
An SQL injection vulnerability exists in Centreon that allows an authenticated user with access to ACL management to read and modify the Centreon database. This vulnerability can lead to full compromise of the database's confidentiality, integrity, and availability.
A vulnerability in Rapid7 Insight Agent on Linux and macOS involves improper handling of local filesystem paths. This flaw may allow authenticated local users to gain elevated privileges by exploiting the agent's inventory collection process that handles crafted paths. The vulnerability requires existing local access to the system.
A vulnerability in OpenTracks versionCode 6751's io.file.importer.ImportActivity component allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message.
An insecure permissions vulnerability exists in the autosave component of AppML neutriNote CE versionCode 1387, allowing unauthorized attackers to write arbitrary files.
A vulnerability in Nextcloud versionCode 30390190 allows attackers to forcibly log out victim users and switch their session to an attacker-controlled profile, bypassing authentication.