# CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

## Records, newest first (an older page)

- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7978.md)
  `CVE-2026-7978` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7963.md)
  `CVE-2026-7963` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7959.md)
  `CVE-2026-7959` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 6 May 2026 · Tags: Broken access control, CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7952.md)
  `CVE-2026-7952` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7946.md)
  `CVE-2026-7946` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7937.md)
  `CVE-2026-7937` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7932.md)
  `CVE-2026-7932` · CVE record: Google Chrome · CVSS 4.4 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7913.md)
  `CVE-2026-7913` · CVE record: Google Chrome · CVSS 7.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-7909.md)
  `CVE-2026-7909` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 6 May 2026 · Tags: CWE-693
- [ciguard: Web UI is missing HTTP defence-in-depth headers](https://agentprime.io/advisories/GHSA-7ww3-xvf5-cxwm.md)
  `GHSA-7ww3-xvf5-cxwm` · PyPI `ciguard`: affected `>=0.1.0, <0.8.2`, fixed in `0.8.2` · CVSS 4.3 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-693
- [open-websearch has SSRF in \`fetchWebContent\` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass \`isPrivateOrLocalHostname\`](https://agentprime.io/advisories/GHSA-v228-72c7-fx8j.md)
  `GHSA-v228-72c7-fx8j`, `CVE-2026-42260` · npm `open-websearch`: affected `<2.1.7`, fixed in `2.1.7` · CVSS 8.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-693
- [VM2 Has a WASM Sandbox Escape](https://agentprime.io/advisories/GHSA-ffh4-j6h5-pg66.md)
  `GHSA-ffh4-j6h5-pg66`, `CVE-2026-26956` · npm `vm2`: affected `<3.10.5`, fixed in `3.10.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has a Sandbox Escape Issue via SuppressedError](https://agentprime.io/advisories/GHSA-55hx-c926-fr95.md)
  `GHSA-55hx-c926-fr95`, `CVE-2026-26332` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has Sandbox Breakout Through Inspect Function](https://agentprime.io/advisories/GHSA-v37h-5mfm-c47c.md)
  `GHSA-v37h-5mfm-c47c`, `CVE-2026-24781` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has Sandbox Breakout Through Promise Species](https://agentprime.io/advisories/GHSA-qvjj-29qf-hp7p.md)
  `GHSA-qvjj-29qf-hp7p`, `CVE-2026-24120` · npm `vm2`: affected `<3.10.5`, fixed in `3.10.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-693, CWE-807
- [VM2 Sandbox Breakout Through \_\_lookupGetter\_\_](https://agentprime.io/advisories/GHSA-grj5-jjm8-h35p.md)
  `GHSA-grj5-jjm8-h35p`, `CVE-2026-24118` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Code injection, CWE-693, CWE-749
- [ERB has an @\_init deserialization guard bypass via def_module / def_method / def_class](https://agentprime.io/advisories/GHSA-q339-8rmv-2mhv.md)
  `GHSA-q339-8rmv-2mhv`, `CVE-2026-41316` · RubyGems `erb`: affected `<4.0.3.1 || >=4.0.4, <4.0.4.1 || >=5.0.0, <6.0.1.1 || >=6.0.2, <6.0.4`, fixed in `4.0.3.1`, `4.0.4.1`, `6.0.1.1`, `6.0.4` · CVSS 8.1 High · Not analysed yet · Published 24 Apr 2026 · Tags: Insecure deserialization, CWE-693
- [OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment](https://agentprime.io/advisories/GHSA-8h25-q488-4hxw.md)
  `GHSA-8h25-q488-4hxw`, `CVE-2026-41900` · npm `openlearnx`: affected `<2.0.3`, fixed in `2.0.3` · CVSS 8.8 High · Not analysed yet · Published 23 Apr 2026 · Tags: Command injection, Code injection, Privilege escalation, Broken access control
- [Beghelli Sicuro24 SicuroWeb Missing Content Security Policy](https://agentprime.io/advisories/CVE-2026-41469.md)
  `CVE-2026-41469` · CVE record: Beghelli SicuroWeb (Sicuro24) · CVSS 5.1 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-693
- [Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchers](https://agentprime.io/advisories/GHSA-4wrg-8wpc-h923.md)
  `GHSA-4wrg-8wpc-h923`, `CVE-2026-22753` · Maven `org.springframework.security:spring-security-config`: affected `>=7.0.0, <7.0.5`, fixed in `7.0.5` · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-693
- [Protection mechanism failure in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-22013.md)
  `CVE-2026-22013` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-693
- [ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement](https://agentprime.io/advisories/CVE-2026-40604.md)
  `CVE-2026-40604` · CVE record: craigjbass clearancekit · CVSS 8.2 High · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-693
- [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-6774.md)
  `CVE-2026-6774` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-693
- [Mitigation bypass in the File Handling component](https://agentprime.io/advisories/CVE-2026-6763.md)
  `CVE-2026-6763` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-693
- [NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg\[7:4\] (CBIE/CBCFE/CBZE-related fields) is incorrectly masked/updated based on menvcfg\[7:4\], so a machine-mode w…](https://agentprime.io/advisories/CVE-2026-29649.md)
  `CVE-2026-29649` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Apr 2026 · Tags: CWE-693
- [OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads](https://agentprime.io/advisories/GHSA-qmwg-qprg-3j38.md)
  `GHSA-qmwg-qprg-3j38`, `CVE-2026-43577` · npm `openclaw`: affected `<2026.4.9`, fixed in `2026.4.9` · CVSS 7.1 High · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, CWE-693
- [October Rain has a Twig Sandbox Bypass via Collection Methods](https://agentprime.io/advisories/GHSA-m5qg-jc75-4jp6.md)
  `GHSA-m5qg-jc75-4jp6`, `CVE-2026-22692`, `PKSA-7hg1-vmz2-j7w6` · Packagist `october/rain`: affected `<3.7.13 || >=4.0.0, <4.1.5`, fixed in `3.7.13`, `4.1.5` · CVSS 4.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Broken access control, CWE-693
- [ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.](https://agentprime.io/advisories/GHSA-r83h-crwp-3vm7.md)
  `GHSA-r83h-crwp-3vm7`, `CVE-2026-40311` · NuGet `Magick.NET-Q16-AnyCPU` and 15 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 5.5 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption, CWE-693
- [Windows Shell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-32225.md)
  `CVE-2026-32225` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-693
- [Windows Shell Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-32202.md)
  `CVE-2026-32202` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.3 Medium · Critical (KEV) · In CISA KEV · EPSS 0.71 · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-693
- [MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing](https://agentprime.io/advisories/CVE-2026-39419.md)
  `CVE-2026-39419` · CVE record: 1Panel-dev MaxKB · CVSS 3.1 Low · Not analysed yet · Published 14 Apr 2026 · Tags: Other injection, Authentication bypass, CWE-693
- [MaxKB: Sandbox escape via ctypes and unhooked SYS_pkey_mprotect](https://agentprime.io/advisories/CVE-2026-39421.md)
  `CVE-2026-39421` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Code injection, CWE-693
- [MaxKB: Sandbox escape via LD_PRELOAD bypass](https://agentprime.io/advisories/CVE-2026-39420.md)
  `CVE-2026-39420` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, CWE-693
- [PraisonAI Vulnerable to Code Injection and Protection Mechanism Failure](https://agentprime.io/advisories/GHSA-3c4r-6p77-xwr7.md)
  `GHSA-3c4r-6p77-xwr7`, `CVE-2026-40158`, `PYSEC-2026-2898` · PyPI `praisonai`: affected `<4.5.128`, fixed in `4.5.128` · CVSS 8.6 High · Not analysed yet · Published 10 Apr 2026 · Tags: Code injection, CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-5911.md)
  `CVE-2026-5911` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-5903.md)
  `CVE-2026-5903` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-5900.md)
  `CVE-2026-5900` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-5896.md)
  `CVE-2026-5896` · CVE record: Google Chrome · CVSS 6.1 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-693
- [Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr](https://agentprime.io/advisories/GHSA-69v7-xpr6-6gjm.md)
  `GHSA-69v7-xpr6-6gjm`, `CVE-2026-34444`, `PYSEC-2026-2613` · PyPI `lupa`: affected `<=2.6`, no fixed version yet · CVSS 7.9 High · Not analysed yet · Published 7 Apr 2026 · Tags: Broken access control, CWE-693, CWE-914
- [Directus: Missing Cross-Origin Opener Policy](https://agentprime.io/advisories/GHSA-8m32-p958-jg99.md)
  `GHSA-8m32-p958-jg99`, `CVE-2026-35408` · npm `directus`: affected `<11.17.0`, fixed in `11.17.0` · CVSS 8.7 High · Not analysed yet · Published 4 Apr 2026 · Tags: CWE-346, CWE-693
- [SandboxJS: Sandbox integrity escape](https://agentprime.io/advisories/GHSA-2gg9-6p7w-6cpj.md)
  `GHSA-2gg9-6p7w-6cpj`, `CVE-2026-34208` · npm `@nyariv/sandboxjs`: affected `<0.8.36`, fixed in `0.8.36` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: Broken access control, CWE-693
- [cronmaster: Middleware authentication bypass enabling unauthorized page access and server-action execution](https://agentprime.io/advisories/CVE-2026-34072.md)
  `CVE-2026-34072` · CVE record: fccview cronmaster · CVSS 8.3 High · Not analysed yet · Published 1 Apr 2026 · Tags: Authentication bypass, CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-5276.md)
  `CVE-2026-5276` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-693
- [Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key](https://agentprime.io/advisories/CVE-2025-15618.md)
  `CVE-2025-15618` · CVE record: MOCK Business::OnlinePayment::StoredTransaction · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS, CWE-693
- [vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out](https://agentprime.io/advisories/GHSA-7972-pg2x-xr59.md)
  `GHSA-7972-pg2x-xr59`, `CVE-2026-27893`, `PYSEC-2026-2297` · PyPI `vllm`: affected `>=0.10.1, <0.18.0`, fixed in `0.18.0` · CVSS 8.8 High · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-501, CWE-693
- [OpenClaw has Inconsistent Host Exec Environment Override Sanitization](https://agentprime.io/advisories/GHSA-39pp-xp36-q6mg.md)
  `GHSA-39pp-xp36-q6mg`, `CVE-2026-35650` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 7.7 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-15, CWE-693
- [OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe](https://agentprime.io/advisories/CVE-2026-33396.md)
  `CVE-2026-33396` · CVE record: OneUptime oneuptime · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2026 · Tags: Command injection, CWE-184, CWE-693
- [@grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers](https://agentprime.io/advisories/GHSA-3mjm-x6gw-2x42.md)
  `GHSA-3mjm-x6gw-2x42` · npm `@grackle-ai/server`: affected `<0.70.4`, fixed in `0.70.4` · CVSS 4.0, no score published · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site scripting (XSS), CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-20701.md)
  `CVE-2026-20701` · CVE record: Apple macOS · CVSS 7.5 High · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-693
- [Protection mechanism failure in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-20665.md)
  `CVE-2026-20665` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-693
- [Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse](https://agentprime.io/advisories/GHSA-5wr9-m6jw-xx44.md)
  `GHSA-5wr9-m6jw-xx44`, `CVE-2026-74790` · NuGet `scriban` and 1 more: affected `<7.0.0`, fixed in `7.0.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-693
- [A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution](https://agentprime.io/advisories/GHSA-w5pc-m664-r62v.md)
  `GHSA-w5pc-m664-r62v`, `CVE-2026-33622`, `GO-2026-4824` · Go `github.com/pinchtab/pinchtab` and 1 more: affected `>=0.8.3`, no fixed version yet · CVSS 6.1 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Code injection, Broken access control, CWE-693
- [Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)](https://agentprime.io/advisories/CVE-2026-32947.md)
  `CVE-2026-32947` · CVE record: step-security harden-runner · CVSS 4.6 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control, CWE-693
- [Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)](https://agentprime.io/advisories/CVE-2026-32946.md)
  `CVE-2026-32946` · CVE record: step-security harden-runner · CVSS 4.6 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control, CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-4447.md)
  `CVE-2026-4447` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-693
- [ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack](https://agentprime.io/advisories/GHSA-hqmj-h5c6-369m.md)
  `GHSA-hqmj-h5c6-369m`, `CVE-2026-28500`, `PYSEC-2026-103` · PyPI `onnx`: affected `<1.21.0rc1`, fixed in `1.21.0rc1` · CVSS 8.6 High · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-345, CWE-494, CWE-693, CWE-829
- [HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment](https://agentprime.io/advisories/CVE-2025-52643.md)
  `CVE-2025-52643` · CVE record: HCL AION · CVSS 4.7 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-693
- [Protection mechanism failure in Veeam Backup and Replication](https://agentprime.io/advisories/CVE-2026-21668.md)
  `CVE-2026-21668` · CVE record: Veeam Backup and Replication · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-693
- [Protection mechanism failure in Veeam Backup and Replication](https://agentprime.io/advisories/CVE-2026-21669.md)
  `CVE-2026-21669` · CVE record: Veeam Backup and Replication · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-693
- [Protection mechanism failure in Veeam Software Appliance](https://agentprime.io/advisories/CVE-2026-21671.md)
  `CVE-2026-21671` · CVE record: Veeam Software Appliance · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-693

Newest: <https://agentprime.io/advisories/tag/cwe-693.md>
Older: <https://agentprime.io/advisories/tag/cwe-693.md?cursor=WyIyMDI2LTAzLTEyVDE1OjA5OjM5LjIwOTAwMFoiLCJDVkUtMjAyNi0yMTY3MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-693&cursor=WyIyMDI2LTA1LTA2VDE4OjEzOjA5LjYxNjAwMFoiLCJDVkUtMjAyNi04MDA0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-693/?cursor=WyIyMDI2LTA1LTA2VDE4OjEzOjA5LjYxNjAwMFoiLCJDVkUtMjAyNi04MDA0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.