<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-271</title><description>Every new CWE-271 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>Kahi has privilege-drop and socket/log permission issues</title><link>https://agentprime.io/advisories/GHSA-55f6-4pr5-c7m5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-55f6-4pr5-c7m5/</guid><description>github.com/kahiteam/kahi &lt;0.1.0-alpha.9, fixed in 0.1.0-alpha.9. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Jun 2026 18:07:44 GMT</pubDate><category>Go</category><category>github.com/kahiteam/kahi</category></item><item><title>CloudNativePG&apos;s metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE</title><link>https://agentprime.io/advisories/GHSA-423p-g724-fr39/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-423p-g724-fr39/</guid><description>github.com/cloudnative-pg/cloudnative-pg &lt;1.28.3 || &gt;=1.29.0, &lt;1.29.1, fixed in 1.28.3, 1.29.1. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 15:59:12 GMT</pubDate><category>Go</category><category>github.com/cloudnative-pg/cloudnative-pg</category><category>critical</category></item><item><title>CVE-2026-35535: Sudo: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid…</title><link>https://agentprime.io/advisories/CVE-2026-35535/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-35535/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 02:21:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25704: Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData</title><link>https://agentprime.io/advisories/CVE-2026-25704/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25704/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Mar 2026 07:44:39 GMT</pubDate><category>CVE</category></item><item><title>Rancher&apos;s Azure AD permission changes are not reflected on active sessions</title><link>https://agentprime.io/advisories/GHSA-vf6j-6739-78m8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-vf6j-6739-78m8/</guid><description>github.com/rancher/rancher &gt;=2.6.7, &lt;2.6.13 || &gt;=2.7.0, &lt;2.7.4, fixed in 2.6.13, 2.7.4. CVSS 8.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Mar 2026 14:48:41 GMT</pubDate><category>Go</category><category>github.com/rancher/rancher</category></item><item><title>CVE-2025-53819: Nix&apos;s privilege dropping to build user broke for macOS</title><link>https://agentprime.io/advisories/CVE-2025-53819/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53819/</guid><description>CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Jul 2025 20:42:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-23395: Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set</title><link>https://agentprime.io/advisories/CVE-2025-23395/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23395/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 May 2025 15:18:46 GMT</pubDate><category>CVE</category></item><item><title>Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes</title><link>https://agentprime.io/advisories/GHSA-gc2p-g4fg-29vh/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gc2p-g4fg-29vh/</guid><description>k8s.io/kubernetes &gt;=1.12.0, &lt;1.12.5 || &gt;=1.13.0, &lt;1.13.1, fixed in 1.12.5, 1.13.1. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 05 May 2025 16:13:00 GMT</pubDate><category>Go</category><category>k8s.io/kubernetes</category></item><item><title>CVE-2024-35179: Unprivileged Stalwart Mail Server user can read files as root</title><link>https://agentprime.io/advisories/CVE-2024-35179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35179/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 May 2024 15:55:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0985: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL</title><link>https://agentprime.io/advisories/CVE-2024-0985/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0985/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Feb 2024 13:00:02 GMT</pubDate><category>CVE</category></item><item><title>Ineffective privileges drop when requesting container network</title><link>https://agentprime.io/advisories/GHSA-mmx5-32m4-wxvx/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-mmx5-32m4-wxvx/</guid><description>github.com/apptainer/apptainer &gt;=1.2.0, &lt;1.2.1, fixed in 1.2.1. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Jul 2023 13:52:20 GMT</pubDate><category>Go</category><category>github.com/apptainer/apptainer</category></item><item><title>CVE-2022-3569: Synacor Zimbra Collaboration Suite (ZCS): Due to an issue with incorrect sudo permissions…</title><link>https://agentprime.io/advisories/CVE-2022-3569/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3569/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Oct 2022 22:45:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-35513: kernel: A flaw incorrect umask during file or directory modification in the Linux kernel NFS…</title><link>https://agentprime.io/advisories/CVE-2020-35513/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-35513/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Jan 2021 15:58:21 GMT</pubDate><category>CVE</category></item></channel></rss>