# Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT](https://agentprime.io/advisories/CVE-2026-107659.md)
  `CVE-2026-107659` · CVE record: wpchill Modula Image Gallery – Photo Grid & Video Gallery · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Bulk Page Generator <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation/Modification/Deletion via 'authorize' Parameter / Suite OAuth Flow](https://agentprime.io/advisories/CVE-2026-110019.md)
  `CVE-2026-110019` · CVE record: niklaslindemann Bulk Page Generator – LPagery · CVSS 4.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Klarna for WooCommerce <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpoint](https://agentprime.io/advisories/CVE-2026-110590.md)
  `CVE-2026-110590` · CVE record: klarnaplugin Klarna for WooCommerce · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter](https://agentprime.io/advisories/CVE-2026-107746.md)
  `CVE-2026-107746` · CVE record: teamfunnelkit FunnelKit – Funnel Builder Plugin for WooCommerce Checkout · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route](https://agentprime.io/advisories/CVE-2026-110721.md)
  `CVE-2026-110721` · CVE record: wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters](https://agentprime.io/advisories/CVE-2026-103525.md)
  `CVE-2026-103525` · CVE record: wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dok…](https://agentprime.io/advisories/CVE-2026-89280.md)
  `CVE-2026-89280` · CVE record: dokaninc Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy · CVSS 4.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Wheels](https://agentprime.io/advisories/CVE-2026-111446.md)
  `CVE-2026-111446` · CVE record: Wheels Wheels · CVSS 8.6 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Missing Authorization on Secret Endpoints](https://agentprime.io/advisories/CVE-2026-109812.md)
  `CVE-2026-109812` · CVE record: Moxa AIG-302 Series · CVSS 6.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth Authentication](https://agentprime.io/advisories/CVE-2026-111388.md)
  `CVE-2026-111388` · CVE record: frappe frappe · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary…](https://agentprime.io/advisories/CVE-2026-88755.md)
  `CVE-2026-88755` · CVE record · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection, Information disclosure, Broken access control
- [ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module.](https://agentprime.io/advisories/CVE-2026-106705.md)
  `CVE-2026-106705` · CVE record · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control
- [Missing authorization in Lenovo Baiying PC Client](https://agentprime.io/advisories/CVE-2026-92629.md)
  `CVE-2026-92629` · CVE record: Lenovo Baiying PC Client · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes](https://agentprime.io/advisories/CVE-2026-111369.md)
  `CVE-2026-111369` · CVE record: classroomio ClassroomIO · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes](https://agentprime.io/advisories/CVE-2026-111368.md)
  `CVE-2026-111368` · CVE record: classroomio ClassroomIO · CVSS 6.1 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints](https://agentprime.io/advisories/CVE-2026-111366.md)
  `CVE-2026-111366` · CVE record: cool-team-official cool-admin-midway · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints](https://agentprime.io/advisories/CVE-2026-111365.md)
  `CVE-2026-111365` · CVE record: cool-team-official cool-admin-midway · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch](https://agentprime.io/advisories/CVE-2026-111364.md)
  `CVE-2026-111364` · CVE record: mindoc-org MinDoc · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox](https://agentprime.io/advisories/CVE-2026-111363.md)
  `CVE-2026-111363` · CVE record: dataelement bisheng · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift](https://agentprime.io/advisories/CVE-2026-111359.md)
  `CVE-2026-111359` · CVE record: crmeb CRMEB · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form](https://agentprime.io/advisories/CVE-2026-111358.md)
  `CVE-2026-111358` · CVE record: mettle sendportal-core · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints](https://agentprime.io/advisories/CVE-2026-111355.md)
  `CVE-2026-111355` · CVE record: zhontai Admin.Core · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints](https://agentprime.io/advisories/CVE-2026-111354.md)
  `CVE-2026-111354` · CVE record: crmeb crmeb_java · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints](https://agentprime.io/advisories/CVE-2026-111353.md)
  `CVE-2026-111353` · CVE record: Peppermint-Lab peppermint · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API](https://agentprime.io/advisories/CVE-2026-111352.md)
  `CVE-2026-111352` · CVE record: ThinkCMF ThinkCMF · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API](https://agentprime.io/advisories/CVE-2026-111351.md)
  `CVE-2026-111351` · CVE record: metasfresh metasfresh · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API](https://agentprime.io/advisories/CVE-2026-111350.md)
  `CVE-2026-111350` · CVE record: papermark Papermark · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQL](https://agentprime.io/advisories/CVE-2026-111349.md)
  `CVE-2026-111349` · CVE record: puemos Craftplan · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpoints](https://agentprime.io/advisories/CVE-2026-111348.md)
  `CVE-2026-111348` · CVE record: likeshop likeshop · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [ZenTao PMS through 22.6 Authorization Bypass via action::editComment](https://agentprime.io/advisories/CVE-2026-111346.md)
  `CVE-2026-111346` · CVE record: easysoft zentaopms · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id](https://agentprime.io/advisories/CVE-2026-111345.md)
  `CVE-2026-111345` · CVE record: polonel trudesk · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description](https://agentprime.io/advisories/CVE-2026-111344.md)
  `CVE-2026-111344` · CVE record: apitable apitable · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}](https://agentprime.io/advisories/CVE-2026-111343.md)
  `CVE-2026-111343` · CVE record: pig-mesh pig · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie](https://agentprime.io/advisories/CVE-2026-111332.md)
  `CVE-2026-111332` · CVE record: AtalayaLabs OxiCloud · CVSS 6.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router](https://agentprime.io/advisories/CVE-2026-111331.md)
  `CVE-2026-111331` · CVE record: Dokploy Dokploy · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo](https://agentprime.io/advisories/CVE-2026-111324.md)
  `CVE-2026-111324` · CVE record: lejianwen rustdesk-api · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download](https://agentprime.io/advisories/CVE-2026-111277.md)
  `CVE-2026-111277` · CVE record: nivocart nivocart · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read](https://agentprime.io/advisories/CVE-2026-92228.md)
  `CVE-2026-92228` · CVE record: Apache Software Foundation Apache Airflow Keycloak provider · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [EnergizeLab Eilik User-ID Mass Assignment Account Takeover](https://agentprime.io/advisories/CVE-2026-105040.md)
  `CVE-2026-105040` · CVE record: EnergizeLab NestJS auth service · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [EnergizeLab Station Middleware Admin APIs Missing Role Checks](https://agentprime.io/advisories/CVE-2026-105039.md)
  `CVE-2026-105039` · CVE record: EnergizeLab station-middleware · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation](https://agentprime.io/advisories/GHSA-hqm2-cfx2-2vgh.md)
  `GHSA-hqm2-cfx2-2vgh`, `CVE-2026-102682` · PyPI `pipecat-ai`: affected `>=0.0.98, <1.6.0`, fixed in `1.6.0` · CVSS 5.6 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Denial of service, Broken access control, CWE-345
- [JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked](https://agentprime.io/advisories/GHSA-jwrc-gm9j-263p.md)
  `GHSA-jwrc-gm9j-263p`, `CVE-2026-102832` · PyPI `jupyterlab` and 2 more: affected `>=4.5.7, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 4.2 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Broken access control
- [SFTPGo source-side file-pattern filter bypass during copy operations](https://agentprime.io/advisories/GHSA-wwv9-g5x4-966q.md)
  `GHSA-wwv9-g5x4-966q`, `CVE-2026-103028`, `GO-2026-6802` · Go `github.com/drakkan/sftpgo/v2`: affected `>=2.5.0, <2.7.6`, fixed in `2.7.6` · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Backstage: Improper access control in backend action invocation](https://agentprime.io/advisories/GHSA-3xr5-8w6c-p5gw.md)
  `GHSA-3xr5-8w6c-p5gw`, `CVE-2026-106495` · npm `@backstage/backend-defaults`: affected `<0.17.8`, fixed in `0.17.8` · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks](https://agentprime.io/advisories/GHSA-fmxq-cgp8-87wp.md)
  `GHSA-fmxq-cgp8-87wp`, `BIT-argo-cd-2026-77459`, `CVE-2026-77459`, `GO-2026-6784` · Go `github.com/argoproj/argo-cd/v2` and 1 more: affected `>=2.10.0, <=2.14.21`, no fixed version yet · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service](https://agentprime.io/advisories/GHSA-qj98-gp63-54xj.md)
  `GHSA-qj98-gp63-54xj`, `CVE-2026-102748` · Go `github.com/dgraph-io/dgraph/v25`: affected `<25.4.0`, fixed in `25.4.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Authentication bypass, Broken access control
- [mise permits untrusted local configuration to override default shell arguments](https://agentprime.io/advisories/GHSA-g74g-rg72-j2p3.md)
  `GHSA-g74g-rg72-j2p3`, `CVE-2026-103929` · crates.io `mise`: affected `<2026.7.14`, fixed in `2026.7.14` · CVSS 7.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection, Broken access control
- [Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods](https://agentprime.io/advisories/GHSA-54mm-6729-r5wp.md)
  `GHSA-54mm-6729-r5wp`, `CVE-2026-85990`, `PKSA-vxb4-5j8y-5cbx` · Packagist `leantime/leantime`: affected `<3.10.0`, fixed in `3.10.0` · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation, Broken access control
- [Nginx UI OTP secure-session step-up is missing on sensitive mutation routes](https://agentprime.io/advisories/GHSA-5v7c-xpfp-p65m.md)
  `GHSA-5v7c-xpfp-p65m`, `CVE-2026-84315`, `GO-2026-6775` · Go `github.com/0xJacky/Nginx-UI`: affected `<1.9.10-0.20260703131214-23d1934099b0`, fixed in `1.9.10-0.20260703131214-23d1934099b0` · CVSS 8.3 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Nginx UI: Account Takeover via Missing \`RequireSecureSession\` on User Management Endpoint](https://agentprime.io/advisories/GHSA-2gc7-j998-5xx6.md)
  `GHSA-2gc7-j998-5xx6`, `CVE-2026-84314`, `GO-2026-6771` · Go `github.com/0xJacky/Nginx-UI`: affected `<1.9.10-0.20260703131214-23d1934099b0`, fixed in `1.9.10-0.20260703131214-23d1934099b0` · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [temporal-proxy payload decryption is not bound to the request namespace](https://agentprime.io/advisories/CVE-2026-108126.md)
  `CVE-2026-108126` · CVE record: Temporal Technologies, Inc. temporal-proxy · CVSS 6.0 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API](https://agentprime.io/advisories/CVE-2026-45165.md)
  `CVE-2026-45165` · CVE record: Palo Alto Networks Idira Secrets Manager (Self-Hosted) · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [La Suite Docs through 6.0.1 Authorization Bypass via Comment Thread Creation](https://agentprime.io/advisories/CVE-2026-111169.md)
  `CVE-2026-111169` · CVE record: suitenumerique docs · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [OpenNMS REST authorization bypass via non-canonical HTTP method](https://agentprime.io/advisories/CVE-2026-111235.md)
  `CVE-2026-111235` · CVE record: The OpenNMS Group Meridian and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control, CWE-204
- [WordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-110362.md)
  `CVE-2026-110362` · CVE record: Planet studio PlanetStudio Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-110374.md)
  `CVE-2026-110374` · CVE record: Hamid Alinia Login with phone number · CVSS 4.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-108499.md)
  `CVE-2026-108499` · CVE record: WebberZone Knowledge Base · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-110364.md)
  `CVE-2026-110364` · CVE record: WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-109689.md)
  `CVE-2026-109689` · CVE record: WP Sunshine Sunshine Photo Cart · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control
- [WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-110360.md)
  `CVE-2026-110360` · CVE record: WPdreams Ajax Search Lite · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/tag/access-control.md>
Older: <https://agentprime.io/advisories/tag/access-control.md?cursor=WyIyMDI2LTEwLTE1VDE4OjEyOjIzLjU2MTAwMFoiLCJDVkUtMjAyNi0xMTAzNjAiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=access-control&cursor=WyIyMDI2LTEwLTE2VDA2OjAwOjEzLjc0MjAwMFoiLCJDVkUtMjAyNi0xMDU5NzMiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/access-control/?cursor=WyIyMDI2LTEwLTE2VDA2OjAwOjEzLjc0MjAwMFoiLCJDVkUtMjAyNi0xMDU5NzMiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.