Threats Tagged 'cwe-266'

A vulnerability in NousResearch hermes-agent up to version 0.16.0 allows remote attackers to cause incorrect privilege assignment via the get_tool_definitions function in agent/agent_init.py. This issue relates to improper handling in the disabled_toolsets Handler component. The vulnerability has a CVSS score of 6.3 and has been publicly disclosed, but no known exploits are currently observed in the wild.

A vulnerability exists in NousResearch hermes-agent up to version 0.16.0 in the Memory Toolset component, specifically in the hermes-agent/model_tools.py file. This issue involves improper access controls that can be exploited remotely. The vulnerability has a CVSS 3.1 score of 6.3, indicating a medium severity level. Exploit code for this vulnerability is publicly available, but there are no known exploits observed in the wild. No patch or official fix information is currently provided.

A vulnerability in cosmicstack-labs mercury-agent up to version 1.1.12 affects the PermissionManager.checkShellCommand function in the run_command Handler component. This flaw leads to incorrect privilege assignment and can be exploited remotely. The vulnerability has a CVSS score of 6.3, indicating a medium severity impact on confidentiality, integrity, and availability. The issue was reported early to the project, but no response or patch has been provided yet. Public exploit details are available, but no known exploitation in the wild has been confirmed.

A vulnerability exists in cosmicstack-labs mercury-agent up to version 1.1.12 affecting the SubAgent.run function in the delegate_task Tool component. This vulnerability allows improper authorization through a remotely executable manipulation. The issue was reported early to the project, but no response or fix has been provided yet. The vulnerability has a CVSS score of 6.3, indicating a medium severity level. Exploit code has been publicly disclosed, but there are no known exploits in the wild at this time.

A vulnerability in mf-yang openclaw-cn up to version 0.2.1 affects the isApprovedElevatedSender function in the src/auto-reply/reply/reply-elevated.ts file. This vulnerability involves improper privilege management and can be exploited remotely. The issue has been publicly disclosed, but the project has not yet responded or issued a fix.

A vulnerability in nanocoai NanoClaw up to version 2.0.64 affects the handleCreateAgent function in the Child-Agent Creation component. This flaw involves improper privilege management that can be exploited remotely. The exploit code is publicly available, but there is no vendor response or patch at this time.

A vulnerability in Red Hat Quay allows users or robots to gain 'Admin' permissions on newly created repositories when acting as a proxy cache and pulling images that have not yet been mirrored. This issue is tracked as CVE-2025-4374 and has a CVSS 3.1 base score of 6.5, indicating a medium severity. Red Hat has released fixed versions 3.13.6 and 3.14.2 to address this flaw.

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.

Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.

Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.