# Critical Advisories: what needs attention now.

A record is critical when any one of these three is true. It’s our own rule, applied the same way to every record, and each record says which of the three it meets. Withdrawn and retracted records are never critical.

- **KEV:** It’s in CISA’s KEV catalogue. CISA lists it as known to be exploited. Any record in the catalogue is critical, whatever its score.
- **CVSS 9+:** Its CVSS score is 9.0 or more. The base score from the record’s chosen CVSS: the CNA’s own first, then GitHub’s or OSV’s, then an ADP’s such as CISA’s.
- **CVSS 7+ and EPSS:** CVSS 7.0 or more, and EPSS 0.1 or more. A high score and at least a 10% estimated chance, from FIRST’s EPSS, of exploitation in the next 30 days.

Being critical doesn’t mean your app is affected; it means it’s worth checking now. Check a lockfile at <https://agentprime.io/check/>, or with the MCP tools `check_lockfile` and `check_packages`. RSS: <https://agentprime.io/advisories/critical/rss.xml>

## Records, newest first (an older page)

- [Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints](https://agentprime.io/advisories/CVE-2026-87689.md)
  `CVE-2026-87689` · CVE record: Rapid7 Metasploit Framework · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [OAuth2 SSRF vulnerability in SAP Cloud SDK for Python](https://agentprime.io/advisories/CVE-2026-89111.md)
  `CVE-2026-89111` · CVE record: SAP_SE SAP Cloud · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Broken Access Control in SAP NetWeaver Visual Composer](https://agentprime.io/advisories/CVE-2026-89110.md)
  `CVE-2026-89110` · CVE record: SAP_SE SAP NetWeaver Visual Composer · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-749
- [Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)](https://agentprime.io/advisories/CVE-2026-89108.md)
  `CVE-2026-89108` · CVE record: SAP_SE SAP Manufacturing Integration and Intelligence (Configuration Service) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)](https://agentprime.io/advisories/CVE-2026-89107.md)
  `CVE-2026-89107` · CVE record: SAP_SE SAP S/4HANA (Manage Substitution/Validation Rules) · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2026-78802.md)
  `CVE-2026-78802` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606…](https://agentprime.io/advisories/CVE-2026-78799.md)
  `CVE-2026-78799` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.](https://agentprime.io/advisories/CVE-2026-52394.md)
  `CVE-2026-52394` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component](https://agentprime.io/advisories/CVE-2026-37107.md)
  `CVE-2026-37107` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation
- [Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.](https://agentprime.io/advisories/CVE-2026-104585.md)
  `CVE-2026-104585` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/re…](https://agentprime.io/advisories/CVE-2026-104584.md)
  `CVE-2026-104584` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.](https://agentprime.io/advisories/CVE-2024-34324.md)
  `CVE-2024-34324` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter.](https://agentprime.io/advisories/CVE-2024-34323.md)
  `CVE-2024-34323` · CVE record · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.](https://agentprime.io/advisories/CVE-2024-34320.md)
  `CVE-2024-34320` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI](https://agentprime.io/advisories/CVE-2026-96119.md)
  `CVE-2026-96119` · CVE record: IBM i · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Code injection
- [DataStage on Cloud Pak for Data Path Traversal](https://agentprime.io/advisories/CVE-2026-82101.md)
  `CVE-2026-82101` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [DataStage on Cloud Pak for Data Information Disclosure](https://agentprime.io/advisories/CVE-2026-82103.md)
  `CVE-2026-82103` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [DataStage on Cloud Pak for Data Path Traversal](https://agentprime.io/advisories/CVE-2026-82110.md)
  `CVE-2026-82110` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint](https://agentprime.io/advisories/CVE-2026-109573.md)
  `CVE-2026-109573` · CVE record: thorsten phpMyFAQ · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: SQL injection
- [Qexo initialization endpoint can reset setup state and expose stored credentials](https://agentprime.io/advisories/CVE-2026-44828.md)
  `CVE-2026-44828` · CVE record: Qexo Qexo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Maximo AI Service Code Injection](https://agentprime.io/advisories/CVE-2026-90920.md)
  `CVE-2026-90920` · CVE record: IBM Maximo AI Service · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Code injection
- [sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace](https://agentprime.io/advisories/CVE-2026-109569.md)
  `CVE-2026-109569` · CVE record: Th0rgal sandboxed.sh · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-1188
- [Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder](https://agentprime.io/advisories/CVE-2026-109566.md)
  `CVE-2026-109566` · CVE record: zofe rapyd-admin · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Hard-coded credentials
- [GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py](https://agentprime.io/advisories/CVE-2025-71429.md)
  `CVE-2025-71429` · CVE record: RVC-Boss GPT-SoVITS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Command injection
- [easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function](https://agentprime.io/advisories/CVE-2020-37279.md)
  `CVE-2020-37279` · CVE record: karuppiah7890 easy-pdf-merge · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Command injection
- [Netherman Portal del Hermano Account Takeover via Password Reset Oracle](https://agentprime.io/advisories/CVE-2026-53997.md)
  `CVE-2026-53997` · CVE record: NetHerman Portal del Hermano (portaldelhermano.es) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass, CWE-640
- [Netcore NR268 DDNS DDNSset.cgi execvp argument injection](https://agentprime.io/advisories/CVE-2026-108929.md)
  `CVE-2026-108929` · CVE record: Netcore NR268 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection, Command injection
- [Apache Allura: Oauth1 Replay Attack](https://agentprime.io/advisories/CVE-2026-92120.md)
  `CVE-2026-92120` · CVE record: Apache Software Foundation Apache Allura · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [Apache Allura: REST API Mass Assignment](https://agentprime.io/advisories/CVE-2026-92119.md)
  `CVE-2026-92119` · CVE record: Apache Software Foundation Apache Allura · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Apache Allura: OAuth1 missing callback validation](https://agentprime.io/advisories/CVE-2026-92116.md)
  `CVE-2026-92116` · CVE record: Apache Software Foundation Apache Allura · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Open redirect
- [NetEase Cloud Music TLS Certificate Validation Bypass](https://agentprime.io/advisories/CVE-2026-109423.md)
  `CVE-2026-109423` · CVE record: NetEase NetEase Cloud Music for Windows · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS
- [NetEase Cloud Music RCE via os.navigateExternal IPC](https://agentprime.io/advisories/CVE-2026-109422.md)
  `CVE-2026-109422` · CVE record: NetEase NetEase Cloud Music for Windows · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-749
- [Missing authentication in HAProxy Data Plane API EE and others](https://agentprime.io/advisories/CVE-2026-109575.md)
  `CVE-2026-109575` · CVE record: HAProxy Data Plane API EE and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [IBM Db2 Mirror for i Privilege Escalation](https://agentprime.io/advisories/CVE-2026-96012.md)
  `CVE-2026-96012` · CVE record: IBM Db2 Mirror for i · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-264
- [Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)](https://agentprime.io/advisories/CVE-2026-108362.md)
  `CVE-2026-108362` · CVE record: Privasys ra-tls-clients · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-346
- [Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations](https://agentprime.io/advisories/CVE-2026-87744.md)
  `CVE-2026-87744` · CVE record: Red Hat Red Hat build of Quarkus 3.27.6.redhat and 2 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Edimax BR-6208AC formWlanMP command injection](https://agentprime.io/advisories/CVE-2026-108918.md)
  `CVE-2026-108918` · CVE record: Edimax BR-6208AC · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection, Command injection
- [Edimax BR-6208AC formAutoFWupgrade command injection](https://agentprime.io/advisories/CVE-2026-108917.md)
  `CVE-2026-108917` · CVE record: Edimax BR-6208AC · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection, Command injection
- [Edimax BR-6208AC formWlanMP buffer overflow](https://agentprime.io/advisories/CVE-2026-108915.md)
  `CVE-2026-108915` · CVE record: Edimax BR-6208AC · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table](https://agentprime.io/advisories/CVE-2026-84286.md)
  `CVE-2026-84286` · CVE record: Turboderp-org ExLlamaV3 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption, CWE-20
- [Edimax BR-6208AC formWlSiteSurvey buffer overflow](https://agentprime.io/advisories/CVE-2026-108914.md)
  `CVE-2026-108914` · CVE record: Edimax BR-6208AC · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Netcore NR268 CGI Execution user_ok improper authentication](https://agentprime.io/advisories/CVE-2026-108907.md)
  `CVE-2026-108907` · CVE record: Netcore NR268 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie](https://agentprime.io/advisories/CVE-2026-109373.md)
  `CVE-2026-109373` · CVE record: zitadel zitadel · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-441
- [ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion](https://agentprime.io/advisories/CVE-2026-109372.md)
  `CVE-2026-109372` · CVE record: zitadel zitadel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header](https://agentprime.io/advisories/CVE-2026-109357.md)
  `CVE-2026-109357` · CVE record: librenms librenms · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection
- [Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass](https://agentprime.io/advisories/CVE-2026-109321.md)
  `CVE-2026-109321` · CVE record: getgrav grav-plugin-login-oauth · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Hard-coded credentials
- [Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder](https://agentprime.io/advisories/CVE-2026-109238.md)
  `CVE-2026-109238` · CVE record: unclecode crawl4ai · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Improper privilege management in Progress MarkLogic Server backup and restore operations](https://agentprime.io/advisories/CVE-2026-85956.md)
  `CVE-2026-85956` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Progress MarkLogic Server xdmp:eval-in](https://agentprime.io/advisories/CVE-2026-85955.md)
  `CVE-2026-85955` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Progress MarkLogic Server Management API](https://agentprime.io/advisories/CVE-2026-85948.md)
  `CVE-2026-85948` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Progress MarkLogic Server forest operations](https://agentprime.io/advisories/CVE-2026-85947.md)
  `CVE-2026-85947` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Insufficient isolation of user-supplied code in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-9191.md)
  `CVE-2026-9191` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-346
- [SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates](https://agentprime.io/advisories/CVE-2026-109399.md)
  `CVE-2026-109399` · CVE record: sbabic swupdate · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS
- [Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout](https://agentprime.io/advisories/CVE-2026-109394.md)
  `CVE-2026-109394` · CVE record: thirty bees thirty bees · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API](https://agentprime.io/advisories/CVE-2026-109391.md)
  `CVE-2026-109391` · CVE record: Square Squash · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Insecure deserialization
- [@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields](https://agentprime.io/advisories/CVE-2026-92681.md)
  `CVE-2026-92681` · CVE record: Neo4j @neo4j/graphql · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [AnyDesk: AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code…](https://agentprime.io/advisories/CVE-2026-109390.md)
  `CVE-2026-109390` · CVE record: AnyDesk AnyDesk · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-130
- [Linksys E1700 setLinksysIpv6 os command injection](https://agentprime.io/advisories/CVE-2026-108896.md)
  `CVE-2026-108896` · CVE record: Linksys E1700 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Command injection
- [Linksys E1700 setDMZ os command injection](https://agentprime.io/advisories/CVE-2026-108895.md)
  `CVE-2026-108895` · CVE record: Linksys E1700 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Command injection
- [Linksys E1700 Static Route addStaticRoute os command injection](https://agentprime.io/advisories/CVE-2026-108894.md)
  `CVE-2026-108894` · CVE record: Linksys E1700 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/critical.md>
Older: <https://agentprime.io/advisories/critical.md?cursor=WyIyMDI2LTEwLTEyVDE0OjAwOjE1LjUxNjAwMFoiLCJDVkUtMjAyNi0xMDg4OTQiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?critical=true&cursor=WyIyMDI2LTEwLTEzVDAxOjA1OjQ2LjE2NjAwMFoiLCJDVkUtMjAyNi05NzIyOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/critical/?cursor=WyIyMDI2LTEwLTEzVDAxOjA1OjQ2LjE2NjAwMFoiLCJDVkUtMjAyNi05NzIyOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.