agentprime: CWE-1427Every new CWE-1427 Advisory and CVE.https://agentprime.io/CVE-2026-54142: OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvalhttps://agentprime.io/advisories/CVE-2026-54142/https://agentprime.io/advisories/CVE-2026-54142/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:42:19 GMTCVECVE-2026-54140: OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationhttps://agentprime.io/advisories/CVE-2026-54140/https://agentprime.io/advisories/CVE-2026-54140/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:13:31 GMTCVECVE-2026-115415: Secret masking bypass in the environment tool in Strands Agents Toolshttps://agentprime.io/advisories/CVE-2026-115415/https://agentprime.io/advisories/CVE-2026-115415/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 19:33:10 GMTCVECVE-2026-109440: LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCodehttps://agentprime.io/advisories/CVE-2026-109440/https://agentprime.io/advisories/CVE-2026-109440/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 00:46:05 GMTCVECVE-2026-77931: MoviePilot 3.1.5 Command Injection via ExecuteCommandToolhttps://agentprime.io/advisories/CVE-2026-77931/https://agentprime.io/advisories/CVE-2026-77931/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 01:24:26 GMTCVECVE-2026-96893: Improper Neutralization of Input Used for LLM Prompting in GitLabhttps://agentprime.io/advisories/CVE-2026-96893/https://agentprime.io/advisories/CVE-2026-96893/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 01:05:41 GMTCVEVibe-Trading LLM-callable tools permit command execution, code injection, and SSRFhttps://agentprime.io/advisories/GHSA-jqmf-mx4f-hfr6/https://agentprime.io/advisories/GHSA-jqmf-mx4f-hfr6/vibe-trading-ai >=0.1.0, <0.1.7, fixed in 0.1.7. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 02 Oct 2026 22:44:03 GMTPyPIvibe-trading-aiCVE-2026-70331: Microsoft Edge for iOS Spoofing Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-70331/https://agentprime.io/advisories/CVE-2026-70331/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 17:41:29 GMTCVECVE-2026-78379: Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Toolshttps://agentprime.io/advisories/CVE-2026-78379/https://agentprime.io/advisories/CVE-2026-78379/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 19:05:57 GMTCVEcriticalCVE-2026-75130: Context7 2.1.2 Prompt Injection via Custom AI Instructionshttps://agentprime.io/advisories/CVE-2026-75130/https://agentprime.io/advisories/CVE-2026-75130/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 18:02:37 GMTCVECVE-2026-21832: HCL AION is affected by multiple security vulnerabilities.https://agentprime.io/advisories/CVE-2026-21832/https://agentprime.io/advisories/CVE-2026-21832/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:24:30 GMTCVECVE-2026-18733: Prompt injection bypasses shell tool consent gate in Strands Agents Toolshttps://agentprime.io/advisories/CVE-2026-18733/https://agentprime.io/advisories/CVE-2026-18733/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 20:33:24 GMTCVECVE-2026-15077: Improper Neutralization of Input Used for LLM Prompting in GitLabhttps://agentprime.io/advisories/CVE-2026-15077/https://agentprime.io/advisories/CVE-2026-15077/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 19:00:11 GMTCVE[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chathttps://agentprime.io/advisories/GHSA-m973-pr9r-hp2w/https://agentprime.io/advisories/GHSA-m973-pr9r-hp2w/@theia/ai-chat <1.71.0, fixed in 1.71.0. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 18 Jun 2026 18:35:23 GMTnpm@theia/ai-chat@theia/ai-chat-ui@theia/ai-claude-code@theia/ai-code-completion@theia/ai-core@theia/ai-editor[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chathttps://agentprime.io/advisories/GHSA-3jww-hxqj-wfq2/https://agentprime.io/advisories/GHSA-3jww-hxqj-wfq2/@theia/ai-chat <1.71.0, fixed in 1.71.0. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 18 Jun 2026 18:35:22 GMTnpm@theia/ai-chat@theia/ai-chat-ui@theia/ai-claude-code@theia/ai-code-completion@theia/ai-core@theia/ai-editor@theia/ai-ideCVE-2026-44717: MCP Calculate Server: Prompt Injection to RCEhttps://agentprime.io/advisories/CVE-2026-44717/https://agentprime.io/advisories/CVE-2026-44717/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 16:58:13 GMTCVEcriticalCVE-2026-44246: nnU-Net: Agentic workflow injection in `.github/workflows/issue-triage.yml` of `MIC-DKFZ/nnUNet`https://agentprime.io/advisories/CVE-2026-44246/https://agentprime.io/advisories/CVE-2026-44246/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 20:41:32 GMTCVECVE-2026-4399: Multiple vulnerabilities in 1millionbot Millie chatbothttps://agentprime.io/advisories/CVE-2026-4399/https://agentprime.io/advisories/CVE-2026-4399/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 10:10:08 GMTCVECVE-2025-64321: Salesforce Agentforce Vibes Extension: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce…https://agentprime.io/advisories/CVE-2025-64321/https://agentprime.io/advisories/CVE-2025-64321/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 18:30:39 GMTCVECVE-2025-64320: Salesforce Agentforce Vibes Extension: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce…https://agentprime.io/advisories/CVE-2025-64320/https://agentprime.io/advisories/CVE-2025-64320/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 18:27:32 GMTCVECVE-2025-64318: Salesforce Mulesoft Anypoint Code Builder: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce…https://agentprime.io/advisories/CVE-2025-64318/https://agentprime.io/advisories/CVE-2025-64318/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 18:19:33 GMTCVECVE-2025-10875: Salesforce Mulesoft Anypoint Code Builder: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce…https://agentprime.io/advisories/CVE-2025-10875/https://agentprime.io/advisories/CVE-2025-10875/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 18:14:28 GMTCVECVE-2025-36730: Windsurf Prompt Injection via Filenamehttps://agentprime.io/advisories/CVE-2025-36730/https://agentprime.io/advisories/CVE-2025-36730/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 16:24:58 GMTCVECVE-2024-3303: Improper Neutralization of Input Used for LLM Prompting in GitLabhttps://agentprime.io/advisories/CVE-2024-3303/https://agentprime.io/advisories/CVE-2024-3303/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Feb 2025 08:31:11 GMTCVE