Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
41921
Total
3420
Critical
12394
High
12304
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-85674 | HIGH | 7.8 | aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd … | Sep 04, 2026 |
| CVE-2026-85673 | HIGH | 7.5 | LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows unauthenticated attackers to bypass SSRF validation. The check_ssrf_url … | Sep 04, 2026 |
| CVE-2026-85672 | CRITICAL | 9.8 | zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized … | Sep 04, 2026 |
| CVE-2026-85671 | HIGH | 7.5 | QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpoints that allows unauthenticated attackers to access any uploaded file or document. Attackers … | Sep 04, 2026 |
| CVE-2026-85670 | MEDIUM | 6.5 | tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model.rs). When loading a tokenizer.json via Tokenizer::from_file/from_str, the builder sizes a scratch buffer … | Sep 04, 2026 |
| CVE-2026-85669 | MEDIUM | 6.5 | potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{conversation_id}/code-changes/sync endpoint. Authenticated attackers can write arbitrary file changes into other users' conversations by … | Sep 04, 2026 |
| CVE-2026-85668 | HIGH | 7.5 | Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint, which accepts a caller-supplied model_path parameter without authentication … | Sep 04, 2026 |
| CVE-2026-85667 | CRITICAL | 9.1 | xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers … | Sep 04, 2026 |
| CVE-2026-85666 | HIGH | 7.5 | OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-compatible POST /v1/responses endpoint. MCP tool definitions accept … | Sep 04, 2026 |
| CVE-2026-85665 | MEDIUM | 6.5 | Bruno versions through 3.4.2 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by using parent-directory traversal segments. … | Sep 04, 2026 |
| CVE-2026-85664 | HIGH | 7.5 | Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter … | Sep 04, 2026 |
| CVE-2026-85663 | CRITICAL | 9.8 | Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo … | Sep 04, 2026 |
| CVE-2026-85662 | MEDIUM | 5.3 | Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious … | Sep 04, 2026 |
| CVE-2026-85661 | CRITICAL | 9.8 | excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files. Attackers can supply … | Sep 04, 2026 |
| CVE-2026-85660 | HIGH | 8.1 | cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPERATORS is enabled. Attackers can use shell command substitution syntax like $(...) … | Sep 04, 2026 |
| CVE-2026-85651 | HIGH | 8.5 | Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authenticated attackers to inject task runs into arbitrary environments. Attackers can … | Sep 04, 2026 |
| CVE-2026-85650 | MEDIUM | 5.4 | Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched without validation or SSRF protection. Authenticated users … | Sep 04, 2026 |
| CVE-2026-85626 | HIGH | 7.5 | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can … | Sep 04, 2026 |
| CVE-2026-85625 | HIGH | 8.1 | sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation … | Sep 04, 2026 |
| CVE-2026-85624 | MEDIUM | 6.5 | Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can … | Sep 04, 2026 |
| CVE-2026-85623 | HIGH | 8.8 | goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the … | Sep 04, 2026 |
| CVE-2026-85622 | MEDIUM | 5.3 | AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establishing WebSocket connections in the establish_ws_connection_v2 handler, allowing authenticated users to bind sessions to workspaces they … | Sep 04, 2026 |
| CVE-2026-85621 | MEDIUM | 6.5 | LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route (/api/agent/webhooks/:platform) is unauthenticated by design … | Sep 04, 2026 |
| CVE-2026-85620 | HIGH | 8.6 | Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading … | Sep 04, 2026 |
| CVE-2026-85619 | HIGH | 7.5 | AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across … | Sep 04, 2026 |