A vulnerability in the Linux kernel's IMA subsystem was resolved that caused errors during early boot when attempting to change file extended attributes (xattrs) on read-only filesystems. Specifically, on ext4 filesystems, attempts to change xattrs triggered a failing ext4 transaction, leading to kernel warnings and potential boot issues. The fix ensures the system detects the read-only state early and returns an error without starting a failing transaction.
A vulnerability in the Linux kernel's isofs filesystem code was resolved. The issue involved improper handling of set_blocksize failures because isofs uses buffer_heads, which do not handle block sizes larger than PAGE_SIZE correctly. This could cause a kernel BUG_ON failure during mounting due to an offset exceeding the folio size.
A vulnerability in the Linux kernel's mac80211_hwsim component allowed undersized HWSIM_ATTR_TX_INFO attributes to be accepted, leading to out-of-bounds reads. The issue was due to insufficient length validation of the attribute payload before casting and reading it as a struct hwsim_tx_rate pointer. This flaw has been resolved by enforcing exact length checks in the attribute policy to reject malformed inputs.
A vulnerability in the Linux kernel's GICv5 interrupt controller driver caused a delay in priority dropping after interrupt activation, potentially blocking new interrupts and causing a denial of service. The issue was due to the priority drop being performed during interrupt deactivation instead of immediately after acknowledgment. This was fixed by moving the priority drop to occur right after interrupt acknowledgment in the main interrupt handler.
A vulnerability in the Linux kernel arm64 kprobes subsystem allowed improper handling of reentered kprobes during single-stepping, potentially causing incorrect interrupt state handling. The issue was that a kprobe hit in the KPROBE_HIT_SS state was treated as unrecoverable, leading to permanent interrupt disablement in some cases. This has been fixed by allowing reentry in KPROBE_HIT_SS to be handled correctly and preserving the interrupt state across nested kprobes.
A use-after-free vulnerability in the Linux kernel's ksmbd component was resolved by ensuring that stale channels are always removed from all sessions on connection teardown. Previously, channels could remain linked to sessions after a connection's binding flag was cleared, leading to dereferencing freed memory and leaking sessions.
Chatwoot versions before 4.17.0 have an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by using a foreign contact inbox source_id. This enables attackers to create or retrieve conversations and post messages on behalf of other accounts.
VeloCloud Orchestrator (VCO) on-premises versions contain a critical SQL injection vulnerability (CVE-2026-114625) that allows authenticated users with minimal privileges, such as those with the Enterprise Read Only role, to escalate their access to superuser operator level. This escalation grants unauthorized access to privileged internal functionality, potentially compromising the confidentiality, integrity, and availability of the orchestrator and its managed data. The vulnerability is actively exploited in the wild, with specific malicious IP addresses identified. Fixed versions have been released for affected VCO versions 5.2.x, 6.1.x, and 6.4.x. Hosted and dedicated VCO instances have already been patched. Immediate upgrade to the fixed releases is recommended, along with restricting web interface access and monitoring for suspicious activity.
Heimdall versions prior to 0.17.17 improperly validate client IP addresses extracted from Forwarded and X-Forwarded-For headers when the trusted_proxies option is enabled. This allows arbitrary, malformed, or obfuscated IP values to be accepted and processed. The Forwarded header parser also incorrectly splits quoted strings, causing parsing errors. This vulnerability has been fixed in version 0.17.17.
Heimdall versions prior to 0.17.17 have an improper input validation vulnerability in proxy mode. The software constructs the Forwarded HTTP header by directly inserting the incoming request's Host header without sanitizing commas or semicolons. This allows attackers to inject additional parameters into the Forwarded header, potentially spoofing IP addresses for upstream services. The issue is patched in version 0.17.17.
CVE-2026-55422 is a medium severity cross-site scripting (XSS) vulnerability in the conda-forge.github.io website. The issue arises because two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML without sanitization. These strings include raw output from build logs, patch outputs, and tracebacks generated by the conda-forge autotick bot. No patches are publicly available at the time of publication.
A vulnerability in pghoard, a PostgreSQL backup daemon, prior to version 2.7.1 causes sensitive database connection information, including username and password, to be logged at the debug level when using .pgpass. This issue has been fixed in version 2.7.1.
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage (such as S3, GCS, or Azure) to execute arbitrary file writes and directory creation outside the designated PostgreSQL data directory (pgdata). When a database administrator executes a restore operation (via pghoard_restore get-basebackup), a maliciously crafted delta backup manifest with path traversal sequences (e.g., ../../../../etc/cron.d/backdoor) will write arbitrary payloads to the host system. This issue has been patched in version 2.7.2.
CVE-2026-57117 is an OS command injection vulnerability in MervinPraison PraisonAI versions 4.6.10 up to but not including 4.6.59. The vulnerability arises because file operation commands are constructed using raw path arguments without proper neutralization, allowing an attacker to inject arbitrary shell commands. This affects local subprocess execution and Docker container execution environments. The issue has been patched in version 4.6.59.
PraisonAI versions from 4.5.115 up to but not including 4.6.61 have a vulnerability where unauthenticated access to A2U event streaming routes is possible when using the documented CLI entrypoint. This occurs because the CLI wrapper does not enforce API key authentication, allowing exposure of sensitive information without authorization. The issue is fixed in version 4.6.61.
CVE-2026-57144 is a high-severity vulnerability in MervinPraison's PraisonAI multi-agent teams system affecting versions from 4.5.110 up to but not including 4.6.61. The issue arises when the SandlockSandbox fallback mechanism does not enforce filesystem or network restrictions if the Landlock module is unavailable, allowing sandboxed code to access unauthorized files and network despite restrictions. This vulnerability has been fixed in version 4.6.61.
CVE-2026-57142 is a high-severity OS command injection vulnerability in MervinPraison PraisonAI versions 4.5.87 up to but not including 4.6.61. The vulnerability arises because the recipe execution policy that blocks dangerous tools only checks tools declared in TEMPLATE.yaml, but the actual workflow execution loads tools from workflow.yaml, allowing untrusted recipes to self-approve critical shell tools without explicit permission. This flaw enables unauthorized execution of shell commands. The issue has been fixed in version 4.6.61.
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account can wipe an entire workspace's content irreversibly. This issue has been patched in version 0.1.5.
PraisonAI versions from 4.2.1 up to but not including 4.6.59 have an unauthenticated AgentOS FastAPI deployment surface. This allows unauthorized actors to invoke agent.chat endpoints without authentication, potentially exposing sensitive information and enabling unauthorized agent operations. The issue has been patched in version 4.6.59.
CVE-2026-57114 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in MervinPraison PraisonAI versions 4.5.126 up to but not including 4.6.59. The Async Jobs API validates webhook URLs during job request parsing and again when constructing the internal Job object, blocking loopback/private targets at validation time. However, the actual webhook delivery does not re-validate the hostname, allowing an attacker to exploit DNS resolution changes to bypass SSRF protections. This vulnerability has been fixed in version 4.6.59.