# CWE-501.

Every Advisory and CVE whose sources give the weakness CWE-501, newest first.

## Records, newest first

- [Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket](https://agentprime.io/advisories/CVE-2026-62146.md)
  `CVE-2026-62146` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.16 and 1 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-501
- [Information disclosure in Eclipse Foundation Eclipse ThreadX](https://agentprime.io/advisories/CVE-2026-102709.md)
  `CVE-2026-102709` · CVE record: Eclipse Foundation Eclipse ThreadX · CVSS 8.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure, Memory corruption, CWE-501
- [Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration](https://agentprime.io/advisories/CVE-2026-54248.md)
  `CVE-2026-54248` · CVE record: kimdre doco-cd · CVSS 6.5 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS, CWE-501
- [Creation of a new configuration by posting a malicious ID to MQTT](https://agentprime.io/advisories/CVE-2026-44091.md)
  `CVE-2026-44091` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-501
- [vLLM: OpenAI auth bypass](https://agentprime.io/advisories/GHSA-94f4-hr76-p5j6.md)
  `GHSA-94f4-hr76-p5j6`, `CVE-2026-48746`, `PYSEC-2026-226` · PyPI `vllm`: affected `>=0.3.0, <0.22.0`, fixed in `0.22.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: HTTP request smuggling, CWE-501
- [DOMPurify: Hook mutation of \`data.allowedTags\` / \`data.allowedAttributes\` permanently pollutes \`DEFAULT_ALLOWED_TAGS\` / \`DEFAULT_ALLOWED_ATTR\`](https://agentprime.io/advisories/GHSA-76mc-f452-cxcm.md)
  `GHSA-76mc-f452-cxcm`, `CVE-2026-65902` · npm `dompurify`: affected `<3.4.7`, fixed in `3.4.7` · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-501, CWE-693
- [DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound \`instanceof\` checks](https://agentprime.io/advisories/GHSA-hpcv-96wg-7vj8.md)
  `GHSA-hpcv-96wg-7vj8`, `CVE-2026-49458` · npm `dompurify`: affected `<3.4.6`, fixed in `3.4.6` · CVSS 6.1 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Cross-site scripting (XSS), CWE-501, CWE-693
- [Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33828.md)
  `CVE-2026-33828` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-501
- [gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules](https://agentprime.io/advisories/GHSA-f26g-jm89-4g65.md)
  `GHSA-f26g-jm89-4g65`, `CVE-2026-40034` · crates.io `gix`: affected `>=0.31.0, <0.83.0`, fixed in `0.83.0` · CVSS 7.3 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection, CWE-183, CWE-349, CWE-501
- [Traefik's ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authentication](https://agentprime.io/advisories/GHSA-6384-m2mw-rf54.md)
  `GHSA-6384-m2mw-rf54`, `CVE-2026-35051`, `GO-2026-5163` · Go `github.com/traefik/traefik` and 2 more: affected `<=1.7.34`, no fixed version yet · CVSS 7.8 High · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-345, CWE-501
- [OpenClaw: Authenticated \`/hooks/wake\` and mapped \`wake\` payloads are promoted into the trusted \`System:\` prompt channel](https://agentprime.io/advisories/GHSA-jf56-mccx-5f3f.md)
  `GHSA-jf56-mccx-5f3f` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 4.0, no score published · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-501
- [OpenClaw: Lower-trust background runtime output is injected into trusted \`System:\` events, and local async exec completion misses the intended \`exec-event\` downgrade](https://agentprime.io/advisories/GHSA-gfmx-pph7-g46x.md)
  `GHSA-gfmx-pph7-g46x` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 4.0, no score published · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-501
- [Electron: Context Isolation bypass via contextBridge VideoFrame transfer](https://agentprime.io/advisories/GHSA-jfqg-hf23-qpw2.md)
  `GHSA-jfqg-hf23-qpw2`, `CVE-2026-34780` · npm `electron`: affected `>=39.0.0-alpha.1, <39.8.0 || >=40.0.0-alpha.1, <40.7.0 || >=41.0.0-alpha.1, <41.0.0-beta.8`, fixed in `39.8.0`, `40.7.0`, `41.0.0-beta.8` · CVSS 8.4 High · Not analysed yet · Published 3 Apr 2026 · Tags: Information disclosure, CWE-501, CWE-1188
- [NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled.](https://agentprime.io/advisories/CVE-2026-24153.md)
  `CVE-2026-24153` · CVE record: NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson Thor · CVSS 5.2 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-501
- [vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out](https://agentprime.io/advisories/GHSA-7972-pg2x-xr59.md)
  `GHSA-7972-pg2x-xr59`, `CVE-2026-27893`, `PYSEC-2026-2297` · PyPI `vllm`: affected `>=0.10.1, <0.18.0`, fixed in `0.18.0` · CVSS 8.8 High · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-501, CWE-693
- [Sandbox escape due to incorrect boundary conditions in the Telemetry component](https://agentprime.io/advisories/CVE-2026-4687.md)
  `CVE-2026-4687` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption, CWE-501
- [Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json](https://agentprime.io/advisories/GHSA-ff64-7w26-62rf.md)
  `GHSA-ff64-7w26-62rf`, `CVE-2026-25725` · npm `@anthropic-ai/claude-code`: affected `<2.1.2`, fixed in `2.1.2` · CVSS 7.7 High · Not analysed yet · Published 6 Feb 2026 · Tags: Information disclosure, CWE-501
- [Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual JSON specification](https://agentprime.io/advisories/GHSA-75mj-4g74-9rg2.md)
  `GHSA-75mj-4g74-9rg2`, `CVE-2025-14542`, `PYSEC-2026-2000` · PyPI `utcp`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 7.5 High · Not analysed yet · Published 13 Dec 2025 · Tags: CWE-501
- [Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events](https://agentprime.io/advisories/GHSA-cm35-v4vp-5xvx.md)
  `GHSA-cm35-v4vp-5xvx`, `CVE-2025-64496`, `PYSEC-2026-1729` · npm `open-webui` and 1 more: affected `<0.6.35`, fixed in `0.6.35` · CVSS 7.3 High · Not analysed yet · Published 7 Nov 2025 · Tags: Code injection, CWE-501, CWE-829, CWE-830
- [Server-side request forgery in Oracle Corporation Oracle Configurator](https://agentprime.io/advisories/CVE-2025-61884.md)
  `CVE-2025-61884` · CVE record: Oracle Corporation Oracle Configurator · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.96 · Not analysed yet · Published 12 Oct 2025 · Tags: Path traversal, Other injection, Authentication bypass, HTTP request smuggling
- [Visual Studio Code Python Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49714.md)
  `CVE-2025-49714` · CVE record: Microsoft Python extension for Visual Studio Code · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-501
- [Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server](https://agentprime.io/advisories/GHSA-g9f5-x53j-h563.md)
  `GHSA-g9f5-x53j-h563`, `CVE-2025-48938`, `GO-2025-3732` · Go `github.com/cli/go-gh/v2`: affected `<2.12.1`, fixed in `2.12.1` · CVSS 2.6 Low · Not analysed yet · Published 30 May 2025 · Tags: CWE-501
- [Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled](https://agentprime.io/advisories/CVE-2025-1118.md)
  `CVE-2025-1118` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: CWE-501
- [Visual Studio Code Python Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49050.md)
  `CVE-2024-49050` · CVE record: Microsoft Python extension for Visual Studio Code · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-501
- [DHCP routing options can manipulate interface-based VPN traffic](https://agentprime.io/advisories/CVE-2024-3661.md)
  `CVE-2024-3661` · CVE record: IETF DHCP · CVSS 7.6 High · Not analysed yet · Published 6 May 2024 · Tags: Authentication bypass, CWE-501
- [A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that…](https://agentprime.io/advisories/CVE-2024-20265.md)
  `CVE-2024-20265` · CVE record: Cisco Cisco IOS XE Software and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-501
- [kubevirt-csi: PersistentVolume allows access to HCP's root node](https://agentprime.io/advisories/GHSA-fg9q-5cw2-p6r9.md)
  `GHSA-fg9q-5cw2-p6r9`, `CVE-2024-1725`, `GO-2025-3512` · Go `github.com/kubevirt/csi-driver`: affected `<0.0.0-202403081943-cc28dcbb0afc14`, fixed in `0.0.0-202403081943-cc28dcbb0afc14` · CVSS 6.5 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: CWE-501
- [Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox](https://agentprime.io/advisories/GHSA-hj55-9jmv-9jrj.md)
  `GHSA-hj55-9jmv-9jrj` · Maven `de.tum.in.ase:artemis-java-test-sandbox`: affected `<1.8.0`, fixed in `1.8.0` · CVSS 8.2 High · Withdrawn · Not analysed yet · Published 19 Jan 2024 · Tags: CWE-501
- [Improper handling of browser-side provided input in richdocuments path handling](https://agentprime.io/advisories/CVE-2023-49788.md)
  `CVE-2023-49788` · CVE record: CollaboraOnline online · CVSS 7.2 High · Not analysed yet · Published 8 Dec 2023 · Tags: Path traversal, CWE-501
- [Docker Desktop 4.11.x allows --no-windows-containers flag bypass](https://agentprime.io/advisories/CVE-2023-0627.md)
  `CVE-2023-0627` · CVE record: Docker Inc. Docker Desktop · CVSS 6.7 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-501
- [Improper trust boundary implementation for SMB in Zoom Clients](https://agentprime.io/advisories/CVE-2023-28597.md)
  `CVE-2023-28597` · CVE record: Zoom Video Communications Inc Zoom (for Android, iOS, Linux, macOS, and Windows) and 2 more · CVSS 8.3 High · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-501
- [Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers](https://agentprime.io/advisories/CVE-2023-0629.md)
  `CVE-2023-0629` · CVE record: Docker Inc. Docker Desktop · CVSS 7.1 High · Not analysed yet · Published 13 Mar 2023 · Tags: CWE-424, CWE-501
- [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series…](https://agentprime.io/advisories/CVE-2022-20826.md)
  `CVE-2022-20826` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-501
- [Incorrect signature verification on Google play-services-basement in Google Play SDK](https://agentprime.io/advisories/CVE-2022-1799.md)
  `CVE-2022-1799` · CVE record: Google LLC Google Play Services SDK · CVSS 5.7 Medium · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-501
- [Class Loading Vulnerability in Artemis](https://agentprime.io/advisories/GHSA-227w-wv4j-67h4.md)
  `GHSA-227w-wv4j-67h4`, `CVE-2024-23682` · Maven `de.tum.in.ase:artemis-java-test-sandbox`: affected `<1.8.0`, fixed in `1.8.0` · CVSS 8.2 High · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-501, CWE-653
- [Context isolation bypass via contextBridge in Electron](https://agentprime.io/advisories/GHSA-h9jc-284h-533g.md)
  `GHSA-h9jc-284h-533g`, `CVE-2020-4077` · npm `electron`: affected `<7.2.4 || >=8.0.0, <8.2.4`, fixed in `7.2.4`, `8.2.4` · CVSS 7.7 High · Not analysed yet · Published 7 Jul 2020 · Tags: CWE-501
- [Context isolation bypass via leaked cross-context objects in Electron](https://agentprime.io/advisories/GHSA-m93v-9qjc-3g79.md)
  `GHSA-m93v-9qjc-3g79`, `CVE-2020-4076` · npm `electron`: affected `<7.2.4 || >=8.0.0, <8.2.4`, fixed in `7.2.4`, `8.2.4` · CVSS 7.8 High · Not analysed yet · Published 7 Jul 2020 · Tags: CWE-501
- [Context isolation bypass via Promise in Electron](https://agentprime.io/advisories/GHSA-6vrv-94jv-crrg.md)
  `GHSA-6vrv-94jv-crrg`, `CVE-2020-15096` · npm `electron`: affected `<6.1.11 || >=7.0.0, <7.2.4 || >=8.0.0, <8.2.4`, fixed in `6.1.11`, `7.2.4`, `8.2.4` · CVSS 6.8 Medium · Not analysed yet · Published 7 Jul 2020 · Tags: CWE-501
- [Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes](https://agentprime.io/advisories/CVE-2019-0035.md)
  `CVE-2019-0035` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 10 Apr 2019 · Tags: CWE-501

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-501>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-501/>. Everything for agents: <https://agentprime.io/llms.txt>.