agentprime: CWE-281

CVE-2026-48183: Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

Thu, 05 Nov 2026 02:42:31 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10149: Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover

Mon, 19 Oct 2026 16:40:26 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Fri, 16 Oct 2026 19:57:26 GMT

wasmtime-wasi <24.0.11 || >=25.0.0, <36.0.12 || >=37.0.0, <45.0.3 || >=46.0.0, <46.0.1, fixed in 24.0.11, 36.0.12, 45.0.3, 46.0.1. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-101306: Multiple jail filesystem root escapes

Thu, 15 Oct 2026 06:46:25 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47596: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved.

Wed, 30 Sep 2026 15:52:21 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47599: NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DM…

Wed, 30 Sep 2026 15:51:22 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47595: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved.

Wed, 30 Sep 2026 15:51:20 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47489: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved.

Wed, 30 Sep 2026 15:49:24 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93658: uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid

Fri, 18 Sep 2026 14:23:20 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

Wed, 16 Sep 2026 22:15:09 GMT

github.com/openfga/openfga <1.18.1, fixed in 1.18.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-82964: Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys

Wed, 16 Sep 2026 14:01:47 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88922: Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

Tue, 15 Sep 2026 19:45:07 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

Thu, 10 Sep 2026 22:51:34 GMT

github.com/rclone/rclone <1.75.1, fixed in 1.75.1. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-14779: Improper Access Control via Secret Type Management API in WSO2 Identity Server

Thu, 06 Aug 2026 07:33:10 GMT

CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

Tue, 21 Jul 2026 21:51:41 GMT

code.gitea.io/gitea <1.27.0, fixed in 1.27.0. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-23556: oxenstored keeps quota related use counts across domain destruction

Thu, 09 Jul 2026 14:48:56 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

Mon, 06 Jul 2026 21:54:05 GMT

uu_mknod <0.6.0, fixed in 0.6.0. CVSS 3.4 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

mkfifo: permissions of an existing file are changed after FIFO creation fails

Mon, 06 Jul 2026 21:53:34 GMT

uu_mkfifo <0.6.0, fixed in 0.6.0. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-4360: Tarfile.extract() doesn't fully respect filter parameter

Tue, 30 Jun 2026 14:45:35 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44947: Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

Tue, 30 Jun 2026 14:21:01 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

Thu, 25 Jun 2026 22:14:38 GMT

golang.org/x/crypto <0.52.0, fixed in 0.52.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-40767: WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability

Mon, 15 Jun 2026 20:18:15 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47270: Synology Surveillance Station: Improper preservation of permissions vulnerability in Archiving Push functionality in…

Wed, 27 May 2026 08:29:56 GMT

CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24194: NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling.

Tue, 26 May 2026 17:24:13 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Fri, 22 May 2026 02:08:34 GMT

golang.org/x/crypto <0.52.0, fixed in 0.52.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-34600: Joplin Server delta API returns note content after share access is revoked

Tue, 19 May 2026 22:28:28 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25850: filemanagement_storage_service has an improper preservation of permissions vulnerability

Tue, 19 May 2026 03:08:35 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue

Mon, 11 May 2026 19:32:36 GMT

mantisbt/mantisbt <2.28.2, fixed in 2.28.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-8325: Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations

Mon, 11 May 2026 09:37:16 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Snipe-IT has Privilege Escalation via API Permissions Assignment

Fri, 08 May 2026 22:24:45 GMT

snipe/snipe-it <8.4.1, fixed in 8.4.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

Wed, 22 Apr 2026 18:31:45 GMT

coreutils <=0.8.0, no fixed version yet. CVSS 6.6 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries

Wed, 22 Apr 2026 18:31:45 GMT

coreutils <=0.8.0, no fixed version yet. CVSS 4.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue

Wed, 22 Apr 2026 18:31:45 GMT

coreutils <0.6.0, fixed in 0.6.0. CVSS 3.4 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-35385: OpenBSD OpenSSH: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid…

Thu, 02 Apr 2026 16:30:59 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Kata Container to Guest micro VM privilege escalation

Thu, 19 Feb 2026 15:25:54 GMT

github.com/kata-containers/kata-containers/src/runtime <0.0.0-20260219090056-6a672503973b, fixed in 0.0.0-20260219090056-6a672503973b. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-69875: A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privilege…

Tue, 03 Feb 2026 00:00:00 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-9615: Networkmanager: networkmanager file access

Mon, 26 Jan 2026 19:58:17 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-55130: node: A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and…

Tue, 20 Jan 2026 20:41:55 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-12125: 3scale-porta: readonly fields not validated server-side

Thu, 06 Nov 2025 21:50:40 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-37735: Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM.

Thu, 06 Nov 2025 14:27:26 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-34298: Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation

Thu, 30 Oct 2025 21:25:52 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

Rancher user retains access to clusters despite Global Role removal in github.com/rancher/rancher

Thu, 30 Oct 2025 15:02:33 GMT

github.com/rancher/rancher <0.0.0-20251014212116-7faa74a968c2, fixed in 0.0.0-20251014212116-7faa74a968c2. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-26420: In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission due to permission overload.

Thu, 04 Sep 2025 17:11:44 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages

Tue, 08 Jul 2025 21:36:52 GMT

pyload-ng <=0.5.0b3.dev88, no fixed version yet. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: GHSA-x698-5hjm-w2m5

Tue, 08 Jul 2025 09:31:29 GMT

pyload-ng <=0.5.0b3.dev77, no fixed version yet. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-43698: Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

Tue, 10 Jun 2025 11:33:08 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-43697: Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper)…

Tue, 10 Jun 2025 11:28:58 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-43701: Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

Tue, 10 Jun 2025 11:21:57 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-43700: Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

Tue, 10 Jun 2025 11:12:53 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-27247: Pasteboard has an improper preservation of permissions vulnerability

Sun, 08 Jun 2025 11:47:25 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.