agentprime: CWE-653Every new CWE-653 Advisory and CVE.https://agentprime.io/CVE-2026-113687: Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypasshttps://agentprime.io/advisories/CVE-2026-113687/https://agentprime.io/advisories/CVE-2026-113687/Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 13:10:11 GMTCVECVE-2026-109083: Apache Syncope: Remote Code Execution via Flowable JUEL expressionhttps://agentprime.io/advisories/CVE-2026-109083/https://agentprime.io/advisories/CVE-2026-109083/Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 13:04:15 GMTCVECVE-2026-120306: Beta9 build sandbox escape via chroot-only isolationhttps://agentprime.io/advisories/CVE-2026-120306/https://agentprime.io/advisories/CVE-2026-120306/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 12:49:05 GMTCVEcriticalCVE-2026-119408: n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodeshttps://agentprime.io/advisories/CVE-2026-119408/https://agentprime.io/advisories/CVE-2026-119408/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 11:30:45 GMTCVECVE-2026-115517: Unrestricted network access between execution contexts in KNIME Business Hubhttps://agentprime.io/advisories/CVE-2026-115517/https://agentprime.io/advisories/CVE-2026-115517/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 18:05:11 GMTCVECVE-2026-115416: Incorrect authorization checks in Amazon Athena engine version 3 query processinghttps://agentprime.io/advisories/CVE-2026-115416/https://agentprime.io/advisories/CVE-2026-115416/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 16:50:18 GMTCVECVE-2026-109443: JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shellhttps://agentprime.io/advisories/CVE-2026-109443/https://agentprime.io/advisories/CVE-2026-109443/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 00:46:07 GMTCVECVE-2026-109441: LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridgehttps://agentprime.io/advisories/CVE-2026-109441/https://agentprime.io/advisories/CVE-2026-109441/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 00:46:06 GMTCVECVE-2026-34009: **Container Escape** Host user home directory mounted with write access into application containerhttps://agentprime.io/advisories/CVE-2026-34009/https://agentprime.io/advisories/CVE-2026-34009/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 09:37:38 GMTCVECVE-2026-108263: Astron Agent: Unsandboxed code-node leads to cross-tenant RCEhttps://agentprime.io/advisories/CVE-2026-108263/https://agentprime.io/advisories/CVE-2026-108263/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 20:47:38 GMTCVEcriticalGhost: Stored XSS via Embed Card Previewshttps://agentprime.io/advisories/GHSA-69qc-f5m6-889c/https://agentprime.io/advisories/GHSA-69qc-f5m6-889c/ghost >=6.34.0, <6.67.0, fixed in 6.67.0. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:43:05 GMTnpmghostCVE-2026-20032: Cisco NX-OS Software Python Sandbox Escape Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-20032/https://agentprime.io/advisories/CVE-2026-20032/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 16:11:55 GMTCVECVE-2026-106588: OpenBSD OpenSSH: In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect…https://agentprime.io/advisories/CVE-2026-106588/https://agentprime.io/advisories/CVE-2026-106588/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 21:10:00 GMTCVEvm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer poolhttps://agentprime.io/advisories/GHSA-fcqc-726x-5wfc/https://agentprime.io/advisories/GHSA-fcqc-726x-5wfc/vm2 <3.11.7, fixed in 3.11.7. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 05 Oct 2026 22:34:35 GMTnpmvm2criticalTrigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromisehttps://agentprime.io/advisories/GHSA-pqxw-g93w-hj9x/https://agentprime.io/advisories/GHSA-pqxw-g93w-hj9x/trigger.dev <4.5.6, fixed in 4.5.6. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 02 Oct 2026 22:39:48 GMTnpmtrigger.devcriticalCVE-2026-102125: Kiteworks Core Sandbox Escapehttps://agentprime.io/advisories/CVE-2026-102125/https://agentprime.io/advisories/CVE-2026-102125/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:15:25 GMTCVECVE-2026-97029: Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process grouphttps://agentprime.io/advisories/CVE-2026-97029/https://agentprime.io/advisories/CVE-2026-97029/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 03:43:16 GMTCVECVE-2026-101078: deepseek-ai deepseek-harness Landlock Backend profiles.ts isolationhttps://agentprime.io/advisories/CVE-2026-101078/https://agentprime.io/advisories/CVE-2026-101078/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 15:30:18 GMTCVECVE-2026-95699: MrSteam iSteamX Improper Isolation or Compartmentalizationhttps://agentprime.io/advisories/CVE-2026-95699/https://agentprime.io/advisories/CVE-2026-95699/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 20:39:59 GMTCVECVE-2026-82964: Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.syshttps://agentprime.io/advisories/CVE-2026-82964/https://agentprime.io/advisories/CVE-2026-82964/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:01:47 GMTCVECVE-2026-15366: vivo Kids Mode: A control logic defect in a specific built-in webpage of Kids Mode allows users to view…https://agentprime.io/advisories/CVE-2026-15366/https://agentprime.io/advisories/CVE-2026-15366/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 06:46:54 GMTCVETraefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRefhttps://agentprime.io/advisories/GHSA-62fc-8686-hfmq/https://agentprime.io/advisories/GHSA-62fc-8686-hfmq/github.com/traefik/traefik <=1.7.34, no fixed version yet. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 06 Aug 2026 16:38:37 GMTGogithub.com/traefik/traefikgithub.com/traefik/traefik/v2github.com/traefik/traefik/v3CVE-2026-62246: Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolationhttps://agentprime.io/advisories/CVE-2026-62246/https://agentprime.io/advisories/CVE-2026-62246/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 21:06:14 GMTCVEBoruta dynamic client registration allows creation of over-privileged OAuth clientshttps://agentprime.io/advisories/GHSA-w869-fcf2-68vp/https://agentprime.io/advisories/GHSA-w869-fcf2-68vp/boruta >=2.3.0, <2.3.7, fixed in 2.3.7. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 30 Jul 2026 14:17:02 GMTHexborutaCVE-2026-53421: Apache Syncope: Remote Code Execution via Scripted Connectorhttps://agentprime.io/advisories/CVE-2026-53421/https://agentprime.io/advisories/CVE-2026-53421/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 14:21:10 GMTCVEcriticalCVE-2026-53405: Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTaskhttps://agentprime.io/advisories/CVE-2026-53405/https://agentprime.io/advisories/CVE-2026-53405/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 14:20:06 GMTCVEcriticalCVE-2026-63071: Apache Syncope: RCE via Groovy Sandbox bypasshttps://agentprime.io/advisories/CVE-2026-63071/https://agentprime.io/advisories/CVE-2026-63071/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 14:19:19 GMTCVEcriticalCVE-2026-15738: Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controllerhttps://agentprime.io/advisories/CVE-2026-15738/https://agentprime.io/advisories/CVE-2026-15738/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 20:19:23 GMTCVEnpm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientshttps://agentprime.io/advisories/GHSA-gqmf-56h7-rrpf/https://agentprime.io/advisories/GHSA-gqmf-56h7-rrpf/praisonai >=1.2.3, <1.7.2, fixed in 1.7.2. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 18 Jun 2026 14:26:28 GMTnpmpraisonaiCVE-2026-12297: Sandbox escape due to incorrect boundary conditions in the Networking componenthttps://agentprime.io/advisories/CVE-2026-12297/https://agentprime.io/advisories/CVE-2026-12297/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 11:52:30 GMTCVEcriticalCVE-2026-12295: Sandbox escape in the DOM: Navigation componenthttps://agentprime.io/advisories/CVE-2026-12295/https://agentprime.io/advisories/CVE-2026-12295/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 11:52:28 GMTCVEcriticalCVE-2026-41155: GPU DDK - SharedSecMem mapped into all GPU virtual address spaceshttps://agentprime.io/advisories/CVE-2026-41155/https://agentprime.io/advisories/CVE-2026-41155/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 21:48:56 GMTCVEApache Syncope has an Improper Isolation or Compartmentalization vulnerabilityhttps://agentprime.io/advisories/GHSA-gq7g-vg2q-jvq3/https://agentprime.io/advisories/GHSA-gq7g-vg2q-jvq3/org.apache.syncope.core:syncope-core-spring >=3.0.0-M0, <=3.0.16 || >=4.0.0-M0, <4.0.6 || >=4.1.0-M0, <4.1.1, fixed in 4.0.6, 4.1.1. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 26 May 2026 13:30:46 GMTMavenorg.apache.syncope.core:syncope-core-springCVE-2026-8945: Sandbox escape in Firefox and Firefox Focus for Androidhttps://agentprime.io/advisories/CVE-2026-8945/https://agentprime.io/advisories/CVE-2026-8945/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 12:29:34 GMTCVECVE-2026-8401: Sandbox escape in the Profile Backup componenthttps://agentprime.io/advisories/CVE-2026-8401/https://agentprime.io/advisories/CVE-2026-8401/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 14:24:33 GMTCVEcriticalvm2 has Sandbox Breakout Through Null Proto Exceptionhttps://agentprime.io/advisories/GHSA-9vg3-4rfj-wgcm/https://agentprime.io/advisories/GHSA-9vg3-4rfj-wgcm/vm2 <3.11.2, fixed in 3.11.2. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 08 May 2026 16:20:58 GMTnpmvm2criticalvm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escapehttps://agentprime.io/advisories/GHSA-vwrp-x96c-mhwq/https://agentprime.io/advisories/GHSA-vwrp-x96c-mhwq/vm2 >=3.9.6, <3.11.0, fixed in 3.11.0. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 07 May 2026 04:07:05 GMTnpmvm2criticalvm2 Access to Host Object Enables Sandbox Escapehttps://agentprime.io/advisories/GHSA-47x8-96vw-5wg6/https://agentprime.io/advisories/GHSA-47x8-96vw-5wg6/vm2 <3.11.0, fixed in 3.11.0. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 07 May 2026 04:00:19 GMTnpmvm2criticalVM2 Has a WASM Sandbox Escapehttps://agentprime.io/advisories/GHSA-ffh4-j6h5-pg66/https://agentprime.io/advisories/GHSA-ffh4-j6h5-pg66/vm2 <3.10.5, fixed in 3.10.5. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 16:44:16 GMTnpmvm2criticalVM2 Has a Sandbox Escape Issue via SuppressedErrorhttps://agentprime.io/advisories/GHSA-55hx-c926-fr95/https://agentprime.io/advisories/GHSA-55hx-c926-fr95/vm2 <3.11.0, fixed in 3.11.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 16:33:45 GMTnpmvm2criticalVM2 Has Sandbox Breakout Through Inspect Functionhttps://agentprime.io/advisories/GHSA-v37h-5mfm-c47c/https://agentprime.io/advisories/GHSA-v37h-5mfm-c47c/vm2 <3.11.0, fixed in 3.11.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 05 May 2026 16:33:14 GMTnpmvm2criticalSpring gRPC SecurityContext leaks across requests upon authorization failurehttps://agentprime.io/advisories/GHSA-4g9c-3x4p-mfpp/https://agentprime.io/advisories/GHSA-4g9c-3x4p-mfpp/org.springframework.grpc:spring-grpc <1.0.3, fixed in 1.0.3. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 28 Apr 2026 15:30:51 GMTMavenorg.springframework.grpc:spring-grpcTraefik Kubernetes CRD allows unauthorized cross-namespace middleware bindinghttps://agentprime.io/advisories/GHSA-xhjw-95fp-8vgq/https://agentprime.io/advisories/GHSA-xhjw-95fp-8vgq/github.com/traefik/traefik <=1.7.34, no fixed version yet. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 24 Apr 2026 20:12:10 GMTGogithub.com/traefik/traefikgithub.com/traefik/traefik/v2github.com/traefik/traefik/v3A new API endpoint introduced in pretix 2025 that is supposed to https://agentprime.io/advisories/GHSA-wr8q-c73g-m7gp/https://agentprime.io/advisories/GHSA-wr8q-c73g-m7gp/pretix >=2025.10.0, <2026.1.2 || >=2026.2.0, <2026.2.1 || >=2026.3.0, <2026.3.1, fixed in 2026.1.2, 2026.2.1, 2026.3.1. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 08 Apr 2026 13:16:43 GMTPyPIpretixCVE-2026-5599: API allows deletion of users of other instancehttps://agentprime.io/advisories/CVE-2026-5599/https://agentprime.io/advisories/CVE-2026-5599/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Apr 2026 12:36:27 GMTCVEElectron: nodeIntegrationInWorker not correctly scoped in shared renderer processeshttps://agentprime.io/advisories/GHSA-xwr5-m59h-vwqr/https://agentprime.io/advisories/GHSA-xwr5-m59h-vwqr/electron <38.8.6 || >=39.0.0-alpha.1, <39.8.4 || >=40.0.0-alpha.1, <40.8.4 || >=41.0.0-alpha.1, <41.0.0, fixed in 38.8.6, 39.8.4, 40.8.4, 41.0.0. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 03 Apr 2026 02:43:05 GMTnpmelectronKeycloak: Replay of action tokens via improper handling of single-use entrieshttps://agentprime.io/advisories/GHSA-rx66-hj7g-28h7/https://agentprime.io/advisories/GHSA-rx66-hj7g-28h7/org.keycloak:keycloak-services <26.5.7, fixed in 26.5.7. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 02 Apr 2026 15:31:39 GMTMavenorg.keycloak:keycloak-servicesKeycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flawhttps://agentprime.io/advisories/GHSA-hj93-h7pg-fh6v/https://agentprime.io/advisories/GHSA-hj93-h7pg-fh6v/org.keycloak:keycloak-services <26.5.7, fixed in 26.5.7. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 02 Apr 2026 15:31:39 GMTMavenorg.keycloak:keycloak-servicesCVE-2025-12805: Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicyhttps://agentprime.io/advisories/CVE-2025-12805/https://agentprime.io/advisories/CVE-2025-12805/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 21:48:16 GMTCVECVE-2026-4692: Sandbox escape in the Responsive Design Mode componenthttps://agentprime.io/advisories/CVE-2026-4692/https://agentprime.io/advisories/CVE-2026-4692/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 12:30:24 GMTCVEcritical