Threats Tagged 'cwe-15'

CVE-2026-107503 is a high-severity vulnerability in Eclipse Ditto Ditto Explorer UI versions 3.6.0 through 3.9.7. It allows an attacker to steal OAuth authorization codes and PKCE verifiers by injecting a malicious OpenID Connect (OIDC) authority URL. This leads to account takeover through token theft. The vulnerability also permits sending victim bearer tokens or Basic credentials to attacker-controlled endpoints. The malicious configuration persists, causing repeated token theft on subsequent UI visits.

CVE-2026-94577 is a privilege escalation vulnerability in Brocade Fabric OS affecting versions before 9.2.2d and from 10.0.0 through 10.0.0a1. It involves the internal CLI authorization mechanism where an authenticated user or local process can bypass RBAC checks by manipulating the process execution environment, allowing elevation to root privileges.

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. In the affected repository revisions, NETBOX_DT_LIBRARY_URL in tests/test_configuration.py is a free-form tracked constant that an unauthenticated pull-request author can change before the validation test harness runs. During pytest collection, tests/definitions_test.py passes the value to Repo.clone_from and create_remote("upstream").fetch(), causing blind Git smart-HTTP requests to an attacker-selected host or loading attacker-controlled tests/known-*.json validation caches. The blind request cannot set arbitrary metadata-service headers or return response bodies, and this path does not execute remote Git hooks, but substituted known data can bypass slug, module, and rack uniqueness validation. This vulnerability is fixed in commit 8980c690097e92f5028c7e6df402b327d827ecd5.

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause arbitrary code execution without user approval.

CVE-2026-85217 is a high-severity vulnerability in Autodesk Fusion Desktop where a malicious add-in can alter persistent network proxy settings without user consent. This can redirect authenticated network traffic through an attacker-controlled proxy, risking exposure of sensitive user information.

CVE-2026-13745 is a critical vulnerability in Google Cloud Gemini CLI versions prior to 0.39.1. It allows attackers to achieve arbitrary code execution by tricking users into running the CLI in an untrusted directory. The attack exploits improper input validation where untrusted .env files can override the GEMINI_CLI_HOME environment variable, causing malicious configuration files to be loaded and bypassing folder trust prompts.

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose preserved .git/config sets core.fsmonitor to an attacker-controlled filesystem-monitor helper, Git can execute that helper while Codex collects repository metadata. The helper runs outside Codex's command sandbox and without a user-approval prompt, allowing attacker-controlled code to run with the user's privileges. The code can read, change, or delete the user's files and access other resources available to the user's account. An ordinary Git clone does not preserve the source repository's local .git/config; exploitation requires a repository delivered or copied with that configuration intact.

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause Git to run an attacker-controlled program. The program runs outside Codex's command sandbox with the signed-in user's privileges, without a workspace-trust prompt, command approval, or interaction with a model. The attacker can read, modify, or delete files and access credentials available to that user. Exploitation requires Git to be available on PATH and the user to open the attacker-prepared repository with its local Git configuration intact. An ordinary Git clone does not copy the source repository's .git/config and is not sufficient by itself.

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration.