agentprime: CWE-426

CVE-2026-119333: draw.io Desktop allows Windows executable search-path hijacking

Fri, 30 Oct 2026 19:59:51 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116243: pgAdmin 4: Utility binary path can point at a shared storage directory

Fri, 30 Oct 2026 19:55:14 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57203: Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location

Tue, 27 Oct 2026 21:48:40 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105477: Untrusted search path in Veeam Agent for Linux

Tue, 27 Oct 2026 16:16:58 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113461: mk-oracle: Local privilege escalation via insecure Oracle Home library loading

Wed, 21 Oct 2026 18:11:34 GMT

CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-95182: An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.

Fri, 16 Oct 2026 00:00:00 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0315: GlobalProtect App: Local Privilege Escalation Vulnerability on macOS

Wed, 14 Oct 2026 20:24:21 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103847: Dimension | Untrusted Search Path (CWE-426)

Tue, 13 Oct 2026 19:50:43 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:46 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:46 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83505: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:45 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:44 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 18:59:45 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-70142: Windows Update Service Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 18:59:40 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 18:59:30 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4869: Potential Privilege Escalation in InstallShield

Tue, 13 Oct 2026 14:10:11 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75782: IBM Aspera Enterprise Webapps Untrusted Search Path

Mon, 12 Oct 2026 22:50:12 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105331: mk-oracle: Local privilege escalation via malicious Oracle Instant Client

Thu, 08 Oct 2026 14:19:41 GMT

CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

Wed, 07 Oct 2026 16:23:52 GMT

@backstage/plugin-techdocs-node <1.15.4, fixed in 1.15.4. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-104809: Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

Mon, 05 Oct 2026 08:32:14 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59265: Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

Fri, 02 Oct 2026 17:34:06 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19547: Local Privilege Escalation in Ghostscript for Windows

Tue, 29 Sep 2026 10:13:31 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87723: Untrusted Search Path (PATH Hijacking) in fuse-archive

Mon, 28 Sep 2026 04:02:14 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100584: OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

Sat, 26 Sep 2026 02:19:08 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100310: GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

Fri, 25 Sep 2026 19:38:28 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68492: Untrusted search path in WebPros Plesk and others

Wed, 23 Sep 2026 19:52:47 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92587: n8n before 1.123.76 Sandbox Escape via Git Relative URL

Wed, 16 Sep 2026 21:46:53 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Wed, 16 Sep 2026 13:54:16 GMT

OpenTelemetry.Resources.Host <1.16.0-beta.2, fixed in 1.16.0-beta.2. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-0307: GlobalProtect App: Local Privilege Escalation Vulnerabilities

Thu, 10 Sep 2026 05:51:53 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-80159: Acrobat Reader | Untrusted Search Path (CWE-426)

Tue, 08 Sep 2026 20:31:03 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-78574: Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling

Tue, 08 Sep 2026 20:11:43 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69785: Windows Smart Card Elevation of Privilege Vulnerability

Tue, 08 Sep 2026 17:16:37 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69328: Windows Storage Elevation of Privilege Vulnerability

Tue, 08 Sep 2026 17:15:11 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84226: Untrusted search path in OpenVPN

Mon, 07 Sep 2026 07:47:04 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

Tue, 01 Sep 2026 20:27:20 GMT

nltk <3.10.3, fixed in 3.10.3. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-82862: Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files

Mon, 31 Aug 2026 08:46:33 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81697: openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration

Thu, 27 Aug 2026 14:51:00 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75768: Substance3D - Painter | Untrusted Search Path (CWE-426)

Tue, 25 Aug 2026 17:58:14 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

Tue, 25 Aug 2026 14:15:27 GMT

praisonai >=3.9.26, <4.6.58, fixed in 4.6.58. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Duplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427)

Tue, 25 Aug 2026 03:32:11 GMT

nltk <=3.10.2, no fixed version yet. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-78155: Untrusted Search Path in StackGres

Sun, 23 Aug 2026 09:26:46 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55769: CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

Thu, 20 Aug 2026 21:41:51 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16869: Vulnerabilities in IBM AIX and PowerVM VIOS

Wed, 19 Aug 2026 19:40:13 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16674: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

Thu, 13 Aug 2026 19:38:51 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14875: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Thu, 13 Aug 2026 19:38:29 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14673: PostgreSQL amcheck does not clear untrusted search path

Thu, 13 Aug 2026 13:00:06 GMT

CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0299: GlobalProtect App: Local Privilege Escalation Vulnerabilities

Thu, 13 Aug 2026 02:04:07 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56174: Windows Narrator Braille Elevation of Privilege Vulnerability

Tue, 11 Aug 2026 17:03:24 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-32791: Untrusted search path in Intel(R) Performance Counter Monitor (Intel(R) PCM)

Tue, 11 Aug 2026 16:28:17 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20799: Untrusted search path in Battery Life Diagnostic Tool software

Tue, 11 Aug 2026 16:26:46 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.