Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.3	EPSS 0.2%	CVE-2026-108741Shepherd · Time-of-check Time-of-use (TOCTOU) Race Condition Low2.3EPSS 0.2%2026-10-11CVE Database V5CVE-2026-108741 Shepherd (shepherd-ai) versions up to 0.3.1 contain a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the citation-checker extra. This flaw allows attackers who control DNS for a crafted reference URL to bypass server-side request forgery (SSRF) protections by causing the system to re-resolve hostnames at request time, potentially sending unauthorized GET requests to internal HTTP(S) services and capturing responses. EPSS 0.2%Vulnerability shepherd-agents #ghsa-53wh-3r96-488v	CVE Database V5	2026-10-11

Showing 1–1 of 1 result