Threats Tagged 'cwe-696'

CVE-2026-110450 is a high-severity vulnerability in NixOS Nix affecting multiple versions before 2.35.3. It involves an incorrect behavior order during a repair operation that can lead to privilege escalation by destroying and replacing a store path before verifying its content.

TYPO3 CMS versions 14.0.0 through 14.3.8 contain a vulnerability where forms using FileUpload or ImageUpload elements with a custom saveToFileMount setting incorrectly store uploaded files in the default public storage folder instead of the intended restricted storage. This misplacement causes uploaded files to be publicly accessible without the intended access controls. Forms using the default saveToFileMount value are not affected.

### Summary `allow_external_plugins=False` (the default, and the CLI default) is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's `load_setuptools_entrypoints()`, which imports every module registered under docling's plugin entry-point group. Only afterwards does docling filter out modules outside the `docling.` namespace. Import-time code in any installed third-party plugin therefore runs even though external plugins are disabled. ### Details In `docling/models/factories/base_factory.py`, `load_from_plugins()` loads all entry points first and applies the `allow_external_plugins` check only to the already-imported modules. The CLI creates these factories when it starts, so running `docling` imports every registered plugin module. A log message says the plugin "will not be loaded", although its module has already been imported. ### Affected configurations Environments in which a package registering a docling plugin entry point is installed, for example an unvetted or compromised dependency, and which rely on `allow_external_plugins=False` to keep that code from running. ### Impact Execution of a third-party plugin module's import-time code in the docling process, contrary to the documented behaviour of `allow_external_plugins=False`. ### Patches Fixed in docling 2.131.0 by [#4413](https://github.com/docling-project/docling/pull/4413). Plugin entry points are now filtered by module name before they are loaded, so with `allow_external_plugins=False` third-party plugin modules are no longer imported. ### Workarounds Upgrade to 2.131.0. For older versions: Only install trusted packages in environments that run docling. Check which packages register docling plugin entry points with `importlib.metadata.entry_points()`.

Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fetching the organization's server-managed settings, even though the session itself authenticated with the Enterprise or Team account. When the settings endpoint rejected that stored key, the session started without the organization's server-managed policy (such as permission deny rules, model restrictions and managed-only locks) or, if a previously cached copy existed on the machine, kept applying that stale copy without receiving later policy changes — while continuing to operate as the organization's account. Triggering this required local access to a device with such a stored API key; the no-policy case additionally required that no managed settings had previously been cached. Endpoint-managed (MDM or file-based) settings were not affected. Claude for Enterprise organizations were affected from version 2.0.68; Claude for Work (Team) organizations from version 2.1.38, when server-managed settings became available to them. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.1.260 or later. Thank you to Tamas Voros / NVIDIA AI Red Team for reporting this issue.

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset.

A vulnerability in Arista Networks EOS allows an unauthenticated attacker to disrupt IS-IS adjacencies by sending crafted IS-IS Hello PDUs on broadcast interfaces. This can cause traffic disruption and loss of IP reachability for prefixes advertised through the affected adjacency. The issue affects multiple versions of EOS from 4.31.0 through 4.36.1F. The vulnerability has a high severity rating with a CVSS score of 7.4.

CVE-2026-59305 is a low severity vulnerability in Spring Cloud Stream versions 4.2.0 through 4.2.6, 4.3.0 through 4.3.3, and 5.0.0 through 5.0.2. It involves an incorrect behavior order where a partition interceptor may be improperly added while sending messages.

Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in russh/src/server/encrypted.rs, server_read_authenticated, and the exec_request callback. Version 0.62.5 fixes the issue.

CVE-2026-44108 is a critical vulnerability caused by improper execution order of shutdown scripts, which leads to premature termination of the firewall during system shutdown. This flaw creates a temporary window where internal services may be exposed externally. Unauthenticated remote attackers could exploit this exposure to gain access that might lead to full system compromise. No patch or official remediation is currently available for this issue.

Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the peer decoder and corrupts subsequent header blocks on the connection. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.