{"data":[{"id":"01M78946MAWVM5Q0WACTHTW95C","url":"https://kb.cert.org/vuls/id/944667","title":"VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability","summary":"A vulnerability was discovered in ComfyUI-Easy-Use version 1.4.1 and earlier, which allows an unauthenticated attacker to execute arbitrary code when the application restarts. The vulnerability occurs when an attacker uploads a malicious Python file to ComfyUI's input directory and uses the save_preview() handler to overwrite an installed custom node's __init__.py file. This allows the attacker to execute code with the privileges of the ComfyUI process, potentially accessing sensitive data and credentials. To mitigate the vulnerability, developers should either remove the ComfyUI-Easy-Use extension or restrict network access to trusted users. A fix has been released in commit 8a0f2fc412, but the maintainer could not be reached to coordinate the vulnerability disclosure.","source":"rss","tags":["advisory"],"created_at":"2026-11-12T14:48:14.492Z","ingested_at":"2026-11-12T16:23:17.750Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN0SHDAD27FFWNGP5H6V","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T17:07:09.803Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T17:07:09.803Z"}}},{"id":"01M785QCK8GNT8VR7744FE8MTZ","url":"https://vulners.com/nvd/NVD:CVE-2026-126995?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-126995","summary":"A vulnerability, identified as CVE-2026-126995, affects tjake Jlama versions 0.8.4 and 0.9.0-beta. The issue arises in the SafeTensorIndex.loadWeights function in the SafeTensorIndex.java file, allowing an attacker to perform a path traversal through manipulation of the weightmap argument. This vulnerability can be exploited remotely, with a public exploit available. The affected project has been notified of the issue but has yet to respond.","source":"rss","tags":["nvd","cve","advisory"],"created_at":"2026-11-12T14:17:28.000Z","ingested_at":"2026-11-12T15:23:48.002Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.94,"publish_threshold":0.65,"classified_at":"2026-11-12T16:07:09.307Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.94,"publish_threshold":0.65,"classified_at":"2026-11-12T16:07:09.307Z"}}},{"id":"01M785QXPYDW37B3ZM5F96M7R3","url":"https://vulners.com/cve/CVE-2026-126995?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-126995","summary":"A vulnerability (CVE-2026-126995) was discovered in tjake Jlama versions 0.8.4 and 0.9.0-beta, affecting the SafeTensorIndex.loadWeights function in SafeTensorIndex.java. The issue allows for path traversal via manipulation of the weightmap argument, enabling remote attacks. An exploit is publicly available, and the project has been notified but has not yet responded. This vulnerability matters to developers and operators of AI agents, as it may allow unauthorized access to sensitive data, compromising model integrity and potentially leading to data breaches or model tampering.","source":"rss","tags":["cve","advisory"],"created_at":"2026-11-12T13:45:17.000Z","ingested_at":"2026-11-12T15:23:48.002Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.93,"publish_threshold":0.65,"classified_at":"2026-11-12T16:08:37.869Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.93,"publish_threshold":0.65,"classified_at":"2026-11-12T16:08:37.869Z"}}},{"id":"01M785QWZD4VWWWKA51GJE50MC","url":"https://vulners.com/cvelist/CVELIST:CVE-2026-126995?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-126995 tjake Jlama SafeTensorIndex.java SafeTensorIndex.loadWeights path traversal","summary":"A vulnerability (CVE-2026-126995) was discovered in tjake Jlama versions up to 0.8.4 and 0.9.0-beta affecting the SafeTensorIndex.loadWeights function in SafeTensorIndex.java. The vulnerability allows for path traversal via manipulation of the weightmap argument, making it susceptible to remote attacks. An exploit has been publicly disclosed and the project has not yet responded to an early issue report. This vulnerability matters to people building or operating AI agents using tjake Jlama as it may allow unauthorized access to sensitive data or system resources.","source":"rss","tags":["cvelist","cve","advisory"],"created_at":"2026-11-12T13:45:17.000Z","ingested_at":"2026-11-12T15:23:48.002Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T16:08:37.866Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T16:08:37.866Z"}}},{"id":"01M7828TW5CMBKEH1BMEEMB51J","url":"https://claude.ai/artifact/6GhQxH4Z8pWyCMVdhVwTGG","title":"Do the top thousand sites charge AI crawlers, block them, or let AI agents buy?","summary":"Researchers analyzed the top 1000 websites and found that 16.4% require registration or subscription for AI crawlers, 35.6% block them outright, and 48% allow AI agents to purchase access. The study also found that major news and media websites are more likely to block or require registration for AI crawlers, while e-commerce and online shopping sites are more likely to allow access for purchase. The results suggest that developers and operators of AI agents should consider obtaining explicit permission or purchasing access to scrape data from high-traffic websites. This is especially relevant for applications that rely on web scraping, such as data aggregation and analysis tools, where access restrictions can significantly impact the quality and quantity of data collected.","source":"hn","tags":["commentary"],"created_at":"2026-11-12T13:02:27.000Z","ingested_at":"2026-11-12T14:23:30.137Z","score":0,"status":"live","metadata":{"source_id":"01KZ8CWN2KBQRTXQ0MXTEP6GHR","hn_object_id":"50466516","author":"Lumyo","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"technology","publish_prob":0.82,"publish_threshold":0.65,"classified_at":"2026-11-12T15:07:11.020Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"technology","publish_prob":0.82,"publish_threshold":0.65,"classified_at":"2026-11-12T15:07:11.020Z"}}},{"id":"01M77VFN1ZC08Q87V411210XNB","url":"https://isc.sans.edu/diary/rss/33514","title":"Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)","summary":"A vulnerability (CVE-2026-102895) was discovered in GPUStack, an open-source software managing GPU clusters, prior to version 2.2.0. The vulnerability allows attackers to bypass authentication and access control by spoofing a custom header, \"X-Gpustack-Real-IP\", which identifies the request's origin as loopback (127.0.0.1). This causes GPUStack to trust the request and bypass authentication. The vulnerability affects users who rely on GPUStack for AI workloads, as attackers can access sensitive resources, including AI models and messages, without proper authentication.","source":"rss","tags":["commentary"],"created_at":"2026-11-12T11:56:24.000Z","ingested_at":"2026-11-12T12:24:53.311Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN18T01VYZBR86088YTY","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T13:07:13.805Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T13:07:13.805Z"}}},{"id":"01M77DNANXXWB5D8ZWTCG1YW3S","url":"https://cve.now/CVE-2026-9198","title":"CVE-2026-9198: Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation (Update: proof of concept on GitHub published)","summary":"A critical vulnerability, CVE-2026-9198, has been discovered in IBM Langflow OSS, an open-source platform for building and deploying AI models. An attacker can exploit this vulnerability by bypassing auto-login authentication and executing arbitrary Python code on the host, resulting in full system control. This can be done remotely without logging in, affecting default deployments. A proof of concept exploit is publicly available on GitHub, and attacks are already underway.","source":"rss","tags":["advisory"],"created_at":"2026-11-12T07:55:34.000Z","ingested_at":"2026-11-12T08:23:17.001Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN0SHDAD27FFWNGP5H6X","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.98,"publish_threshold":0.65,"classified_at":"2026-11-12T09:07:10.040Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.98,"publish_threshold":0.65,"classified_at":"2026-11-12T09:07:10.040Z"}}},{"id":"01M77DNC50F1TV81NM8Q1382NQ","url":"https://cve.now/CVE-2025-11201","title":"CVE-2025-11201: MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability (Update: Nuclei template published)","summary":"A remote code execution vulnerability was discovered in the MLflow Tracking Server, specifically in its handling of model file paths during model creation. An attacker can exploit this flaw to run arbitrary code with the service account's privileges by submitting a maliciously crafted user-supplied path. This vulnerability allows an attacker to execute code without authentication, posing a significant risk to systems using MLflow. The Nuclei template for exploiting this vulnerability has been published, making it essential for users to apply the necessary patches or mitigations to prevent exploitation.","source":"rss","tags":["advisory"],"created_at":"2026-11-12T07:46:34.000Z","ingested_at":"2026-11-12T08:23:17.001Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN0SHDAD27FFWNGP5H6X","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.91,"publish_threshold":0.65,"classified_at":"2026-11-12T09:07:10.041Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.91,"publish_threshold":0.65,"classified_at":"2026-11-12T09:07:10.041Z"}}},{"id":"01M77DPNE4SN0C9F08T8QK5JTG","url":"https://vulners.com/githubexploit/F19E073C-14DB-5C15-BF05-68774DCA3EFE?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"Exploit for Code Injection in Langflow","summary":"A vulnerability was discovered in IBM Langflow OSS versions 1.0.0 through 1.10.0, allowing unauthenticated attackers to obtain a SUPERUSER token via the /api/v1/autologin endpoint. This token can then be used to execute arbitrary code via the /api/v1/validate/code endpoint, resulting in remote code execution (RCE) in default Langflow deployments. This exploit is a proof-of-concept and should only be tested on authorized systems. It may cause unintended consequences such as downtime or data corruption.","source":"rss","tags":["githubexploit","exploit","advisory"],"created_at":"2026-11-12T06:07:18.000Z","ingested_at":"2026-11-12T08:23:43.394Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.95,"publish_threshold":0.65,"classified_at":"2026-11-12T09:07:16.211Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.95,"publish_threshold":0.65,"classified_at":"2026-11-12T09:07:16.211Z"}}},{"id":"01M76ZYACQ86SBJTJNB7KX7Q4Z","url":"https://vulners.com/redhat/RHSA-2026:99167?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"Important: Red Hat Security Advisory: python-oauthlib security update","summary":"Red Hat has released an update for python-oauthlib to address a security vulnerability in the package. The vulnerability, identified as CVE-2026-118669, allows for privilege escalation via client identity confusion in token grant handlers. This issue has been rated as Important by Red Hat Product Security, with a corresponding CVSS base score available in the References section. The update is applicable to Red Hat Enterprise Linux 9.8 Extended Update Support and is intended to prevent unauthorized access and potential security breaches.","source":"rss","tags":["redhat","info","identity","advisory"],"created_at":"2026-11-12T01:32:17.000Z","ingested_at":"2026-11-12T04:23:33.079Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.8,"publish_threshold":0.65,"classified_at":"2026-11-12T05:07:09.318Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.8,"publish_threshold":0.65,"classified_at":"2026-11-12T05:07:09.318Z"}}},{"id":"01M76ZYA5GYSEW4MATZ7W5DHGG","url":"https://vulners.com/redhat/RHSA-2026:99167-CVE-2026-118669?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers","summary":"A vulnerability was discovered in oauthlib, a Python library for implementing OAuth authorization flows. The flaw allows a remote attacker with lower privileges to exploit client identity confusion in token grant handlers, enabling them to obtain access tokens with unauthorized permissions and scopes associated with another client. This privilege escalation vulnerability affects systems using oauthlib for OAuth authorization, specifically in scenarios where client identity is not properly validated.","source":"rss","tags":["redhat","unix","identity","advisory"],"created_at":"2026-11-12T01:32:17.000Z","ingested_at":"2026-11-12T04:23:33.079Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.79,"publish_threshold":0.65,"classified_at":"2026-11-12T05:07:09.167Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.79,"publish_threshold":0.65,"classified_at":"2026-11-12T05:07:09.167Z"}}},{"id":"01M76J71KG3WJ2Y2D0PY5RNTGQ","url":"https://vulners.com/nvd/NVD:CVE-2026-67544?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67544","summary":"A remote code execution (RCE) vulnerability, CVE-2026-67544, was discovered in Heym's workflow engine prior to version 0.0.71. The vulnerability occurs when an authenticated user submits arbitrary Python code through the Playwright node's playwrightCode field, which is then executed directly by the backend process without sandboxing or validation. This allows for RCE on the backend host, potentially running as the root user in default Docker deployments. The issue has been patched in version 0.0.71.","source":"rss","tags":["nvd","cve","agent-security","advisory"],"created_at":"2026-11-11T22:17:29.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}}},{"id":"01M76J71B4TZ29RBBE03WNVSC9","url":"https://vulners.com/nvd/NVD:CVE-2026-67547?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67547","summary":"A vulnerability, tracked as CVE-2026-67547, was discovered in the self-hosted AI agent OS taOS. In versions prior to 1.0.0-beta.23, the taOS API endpoint for executing built-in skills did not perform sufficient access controls, allowing any authenticated non-admin user to execute arbitrary Python code on the host system. This vulnerability enabled remote code execution without requiring admin privileges. The issue was addressed in version 1.0.0-beta.23.","source":"rss","tags":["nvd","cve","agent-security","advisory"],"created_at":"2026-11-11T22:17:29.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.99,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.99,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}}},{"id":"01M76J712DXQMGZDEY6VNPZHXF","url":"https://vulners.com/nvd/NVD:CVE-2026-67546?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67546","summary":"A vulnerability, CVE-2026-67546, was identified in Heym's agentic systems and business-process automation infrastructure prior to version 0.0.75. An authenticated user with the lowest role could execute a malicious command on the shared backend host by exploiting the POST /api/mcp/fetch-tools endpoint, which accepts the stdio transport. This allowed the attacker to bypass normal protocol validation and execute arbitrary code, regardless of whether the command was intended to communicate via the MCP protocol. The issue has been patched in version 0.0.75, which adds role-based access controls to mitigate the vulnerability.","source":"rss","tags":["nvd","cve","mcp-security","agent-security","advisory"],"created_at":"2026-11-11T22:17:29.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}}},{"id":"01M76J70SNGYCPGZ6WK31NEPKB","url":"https://vulners.com/nvd/NVD:CVE-2026-67545?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67545","summary":"A security vulnerability was discovered in Heym, a system used for building and running agentic systems and business-process automations. Prior to version 0.0.73, Heym's HTTP workflow node made unvalidated outbound HTTP requests to user-specified URLs, allowing an unauthenticated attacker to exploit a Server-Side Request Forgery (SSRF) vulnerability. This was possible when a workflow targeting internal addresses was exposed with anonymous execution. The issue has been resolved in version 0.0.73, which adds validation for target host or IP addresses in the HTTP workflow node.","source":"rss","tags":["nvd","cve","agent-security","advisory"],"created_at":"2026-11-11T22:17:29.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}}},{"id":"01M76J70GW99TGMNKE4B7M9YA0","url":"https://vulners.com/nvd/NVD:CVE-2026-67548?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67548","summary":"A security vulnerability, CVE-2026-67548, was discovered in the self-hosted AI agent OS, taOS, prior to version 1.0.0-beta.25. The vulnerability allowed any authenticated user to read and modify system configuration, platform settings, and trigger a service restart, potentially causing configuration corruption or a denial of service. This was possible due to the lack of admin authorization dependency for APIRouter instance creation. The issue has been addressed in version 1.0.0-beta.25, and users are advised to update to this version to ensure system security. This vulnerability matters for developers and operators of AI agents as it highlights the importance of proper authorization and access control in AI agent management systems.","source":"rss","tags":["nvd","cve","advisory"],"created_at":"2026-11-11T22:17:29.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:12.409Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:12.409Z"}}},{"id":"01M76J739EF6N30CK2DXR0KGA7","url":"https://vulners.com/nvd/NVD:CVE-2026-67541?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67541","summary":"An authentication vulnerability was discovered in the Heym system, allowing non-admin team members to add attacker accounts to teams, grant them access to credentials, and decrypt sensitive data such as API keys and OAuth tokens. This was possible due to a flawed access control mechanism that relied solely on team membership rather than the team creator/admin role. The vulnerability has been patched in version 0.0.70, which enforces stricter access controls and adds a role column to the TeamMember entity.","source":"rss","tags":["nvd","cve","identity","advisory"],"created_at":"2026-11-11T22:17:28.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.98,"publish_threshold":0.65,"classified_at":"2026-11-12T01:09:26.107Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.98,"publish_threshold":0.65,"classified_at":"2026-11-12T01:09:26.107Z"}}},{"id":"01M76J72QQGSSYC3Z713D2J8YD","url":"https://vulners.com/nvd/NVD:CVE-2026-67542?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67542","summary":"A security vulnerability was discovered in the Heym system prior to version 0.0.70. The issue allowed authenticated users with the lowest role to access the POST /api/mcp/fetch-tools endpoint, which could be used to fetch an attacker-supplied URL through the SSE and Streamable HTTP transports without any security restrictions. This allowed an attacker to perform a server-side request forgery (SSRF) attack, which can be used to access private IP addresses and potentially compromise the system. The vulnerability was patched in version 0.0.70, which restricts access to the endpoint to users with higher roles and adds security restrictions to prevent SSRF attacks.","source":"rss","tags":["nvd","cve","mcp-security","agent-security","advisory"],"created_at":"2026-11-11T22:17:28.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T02:07:08.542Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T02:07:08.542Z"}}},{"id":"01M76J72F6DX3P7CX1HVE3JYKK","url":"https://vulners.com/nvd/NVD:CVE-2026-67543?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67543","summary":"A vulnerability (CVE-2026-67543) was discovered in Heym, an agentic system and business-process automation platform, prior to version 0.0.70. The issue allowed untrusted code to escape the intended Docker sandbox and execute with host root privileges due to inadequate isolation. Specifically, the skill executor skillpythonexecutor.py ran untrusted code in a local subprocess with excessive filesystem and network access, and mounted the Docker socket as root. This allowed an attacker to potentially exploit the vulnerability and gain root access on the host system. The issue has been patched in version 0.0.70 of Heym.","source":"rss","tags":["nvd","cve","agent-security","advisory"],"created_at":"2026-11-11T22:17:28.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":1,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.736Z"}}},{"id":"01M76J726GFJACVTNTR10CV0RT","url":"https://vulners.com/nvd/NVD:CVE-2026-67540?utm_source=rss&utm_medium=rss&utm_campaign=rss","title":"CVE-2026-67540","summary":"CVE-2026-67540 is a vulnerability in Heym, a system used for building and running agentic systems and business-process automations. Prior to version 0.0.70, authenticated users could access and use private workflow and node templates from other tenants by exploiting a lack of visibility and access control checks. This allowed unauthorized access to sensitive data, including full node/edge graphs and shared email addresses. The vulnerability has been patched in version 0.0.70, which enforces visibility and access controls correctly. This issue matters to people building or operating AI agents as it highlights the importance of robust access control and visibility checks in agentic systems to prevent unauthorized data access and potential security breaches.","source":"rss","tags":["nvd","cve","advisory"],"created_at":"2026-11-11T22:17:28.000Z","ingested_at":"2026-11-12T00:23:36.546Z","score":0,"status":"live","metadata":{"source_id":"01M6S0BN16WCVYCNJ6Q14K8SA1","classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.671Z"}},"product_data":{"classification":{"model":"jev-1.13.0","path":"jev","relevance":"medium","category":"security","publish_prob":0.97,"publish_threshold":0.65,"classified_at":"2026-11-12T01:07:21.671Z"}}}],"meta":{"total":217,"limit":20,"offset":0}}