# CWE-693. Every Advisory and CVE whose sources give the weakness CWE-693, newest first. ## Records, newest first (an older page) - [npm PraisonAI AgentLoop onToolCall approval runs after tool execution](https://agentprime.io/advisories/GHSA-h2w2-v7j6-xqm4.md) `GHSA-h2w2-v7j6-xqm4`, `CVE-2026-57137` · npm `praisonai`: affected `>=1.4.0, <1.7.2`, fixed in `1.7.2` · CVSS 8.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Broken access control, CWE-693 - [npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining](https://agentprime.io/advisories/GHSA-vjv9-7m7j-h833.md) `GHSA-vjv9-7m7j-h833`, `CVE-2026-57136` · npm `praisonai`: affected `>=1.2.3, <1.7.2`, fixed in `1.7.2` · CVSS 8.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, Broken access control, CWE-693 - [npm PraisonAI codeMode sandbox escape via Function constructor](https://agentprime.io/advisories/GHSA-vmmj-pfw7-fjwp.md) `GHSA-vmmj-pfw7-fjwp`, `CVE-2026-57138` · npm `praisonai`: affected `>=1.4.0, <1.7.2`, fixed in `1.7.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-184, CWE-693 - [npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients](https://agentprime.io/advisories/GHSA-gqmf-56h7-rrpf.md) `GHSA-gqmf-56h7-rrpf`, `CVE-2026-57135` · npm `praisonai`: affected `>=1.2.3, <1.7.2`, fixed in `1.7.2` · CVSS 7.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-653, CWE-693 - [PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder](https://agentprime.io/advisories/GHSA-pv2j-rghr-v5r9.md) `GHSA-pv2j-rghr-v5r9`, `CVE-2026-57120`, `PYSEC-2026-3533` · PyPI `praisonaiagents`: affected `<1.6.59`, fixed in `1.6.59` · CVSS 6.5 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-693 - [PraisonAI recipe.run_stream skips dangerous-tool policy enforcement](https://agentprime.io/advisories/GHSA-v847-hxxw-3pxg.md) `GHSA-v847-hxxw-3pxg`, `CVE-2026-56838`, `PYSEC-2026-3520` · PyPI `praisonai`: affected `>=4.5.87, <4.6.59`, fixed in `4.6.59` · CVSS 7.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, Broken access control, CWE-693 - [Duplicate Advisory: Picklescan Bypasses Unsafe Globals Check using pty.spawn](https://agentprime.io/advisories/GHSA-5gp7-4733-2w2v.md) `GHSA-5gp7-4733-2w2v` · PyPI `picklescan`: affected `*`, no fixed version yet · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-693 - [Open WebUI: Stored XSS to Account Takeover via Model Profile Images](https://agentprime.io/advisories/GHSA-v2qm-5wxj-qhj7.md) `GHSA-v2qm-5wxj-qhj7`, `CVE-2026-54013`, `PYSEC-2026-2757` · PyPI `open-webui`: affected `<0.9.6`, fixed in `0.9.6` · CVSS 7.6 High · Not analysed yet · Published 17 Jun 2026 · Tags: Cross-site scripting (XSS), CWE-116, CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48571.md) `CVE-2025-48571` · CVE record: Google Android · CVSS 4.3 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-12457.md) `CVE-2026-12457` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-12438.md) `CVE-2026-12438` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-693 - [n8n: Python Code Node AST Validator Bypass](https://agentprime.io/advisories/GHSA-jwm3-qcfw-c5pp.md) `GHSA-jwm3-qcfw-c5pp`, `CVE-2026-56777` · npm `n8n`: affected `<2.25.7 || >=2.26.0, <2.26.2`, fixed in `2.25.7`, `2.26.2` · CVSS 5.3 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-184, CWE-693 - [Duplicate Advisory: Linux and macOS exec allowlists skipped configured argument patterns](https://agentprime.io/advisories/GHSA-3v3j-737j-7g74.md) `GHSA-3v3j-737j-7g74` · npm `openclaw`: affected `*`, no fixed version yet · CVSS 8.3 High · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-693 - [Duplicate Advisory: Skill-command dispatch could skip before-tool-call hooks](https://agentprime.io/advisories/GHSA-r7vv-6763-m739.md) `GHSA-r7vv-6763-m739` · npm `openclaw`: affected `<=2026.5.5`, no fixed version yet · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-693 - [Deno: \`fetch()\` API sandbox bypass via missing DNS resolution check](https://agentprime.io/advisories/GHSA-cpgj-f7g3-2pp2.md) `GHSA-cpgj-f7g3-2pp2`, `CVE-2026-49859` · crates.io `deno`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 5.2 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-693 - [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-12316.md) `CVE-2026-12316` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-693 - [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-12315.md) `CVE-2026-12315` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-693 - [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-12302.md) `CVE-2026-12302` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-693 - [Sandbox escape in the Security: Process Sandboxing component](https://agentprime.io/advisories/CVE-2026-12296.md) `CVE-2026-12296` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-403, CWE-693 - [Sandbox escape in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-12295.md) `CVE-2026-12295` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-653, CWE-693 - [Sandbox escape in the DOM: Workers component](https://agentprime.io/advisories/CVE-2026-12294.md) `CVE-2026-12294` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Privilege escalation, CWE-693 - [DOMPurify: Trusted Types policy survives \`clearConfig()\` and can poison later \`RETURN_TRUSTED_TYPE\` output](https://agentprime.io/advisories/GHSA-vxr8-fq34-vvx9.md) `GHSA-vxr8-fq34-vvx9`, `CVE-2026-65899` · npm `dompurify`: affected `<3.4.9`, fixed in `3.4.9` · CVSS 5.1 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-693 - [DOMPurify: Hook mutation of \`data.allowedTags\` / \`data.allowedAttributes\` permanently pollutes \`DEFAULT_ALLOWED_TAGS\` / \`DEFAULT_ALLOWED_ATTR\`](https://agentprime.io/advisories/GHSA-76mc-f452-cxcm.md) `GHSA-76mc-f452-cxcm`, `CVE-2026-65902` · npm `dompurify`: affected `<3.4.7`, fixed in `3.4.7` · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-501, CWE-693 - [DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound \`instanceof\` checks](https://agentprime.io/advisories/GHSA-hpcv-96wg-7vj8.md) `GHSA-hpcv-96wg-7vj8`, `CVE-2026-49458` · npm `dompurify`: affected `<3.4.6`, fixed in `3.4.6` · CVSS 6.1 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Cross-site scripting (XSS), CWE-501, CWE-693 - [DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM](https://agentprime.io/advisories/GHSA-r47g-fvhr-h676.md) `GHSA-r47g-fvhr-h676`, `CVE-2026-49459` · npm `dompurify`: affected `<3.4.6`, fixed in `3.4.6` · CVSS 6.1 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Cross-site scripting (XSS), Prototype pollution, CWE-693 - [Qihoo 360 Total Security Nucleus Engine Monitoring Logic RpcStringBindingComposeW protection mechanism](https://agentprime.io/advisories/CVE-2026-12214.md) `CVE-2026-12214` · CVE record: Qihoo 360 Total Security · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-12031.md) `CVE-2026-12031` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-12027.md) `CVE-2026-12027` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2026 · Tags: Privilege escalation, CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2025-30431.md) `CVE-2025-30431` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2025-24284.md) `CVE-2025-24284` · CVE record: Apple macOS · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-693 - [KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs](https://agentprime.io/advisories/CVE-2026-48546.md) `CVE-2026-48546` · CVE record: lingdojo kana-dojo · CVSS 8.5 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-693 - [@hulumi/baseline: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture](https://agentprime.io/advisories/GHSA-cj8g-prcm-mfg5.md) `GHSA-cj8g-prcm-mfg5`, `CVE-2026-48037` · npm `@hulumi/baseline`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 6.3 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-693 - [@hulumi/policies bypasses policy packs with a forged Pulumi-URN logical name](https://agentprime.io/advisories/GHSA-rhgj-6g2c-frmm.md) `GHSA-rhgj-6g2c-frmm`, `CVE-2026-48033` · npm `@hulumi/policies`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 8.4 High · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-693 - [Windows Boot Manager Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-47656.md) `CVE-2026-47656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45595.md) `CVE-2026-45595` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Microsoft Excel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45459.md) `CVE-2026-45459` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 3.3 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48575.md) `CVE-2026-48575` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48570.md) `CVE-2026-48570` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48568.md) `CVE-2026-48568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45588.md) `CVE-2026-45588` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [UEFI Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45656.md) `CVE-2026-45656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45655.md) `CVE-2026-45655` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11695.md) `CVE-2026-11695` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11684.md) `CVE-2026-11684` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-693 - [actual Allows Electron to Run As Node](https://agentprime.io/advisories/GHSA-7rvm-xjpp-63r9.md) `GHSA-7rvm-xjpp-63r9`, `CVE-2026-42890` · npm `actual`: affected `<26.5.0`, fixed in `26.5.0` · CVSS 4.8 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Code injection, Privilege escalation, CWE-693 - [Twig: Possible sandbox bypass when using a source policy](https://agentprime.io/advisories/GHSA-2q52-x2ff-qgfr.md) `GHSA-2q52-x2ff-qgfr`, `CVE-2026-24425`, `PKSA-gw7n-z4yx-7xjt` · Packagist `twig/twig`: affected `>=2.16.0, <=2.16.1 || >=3.9.0, <3.26.0`, fixed in `3.26.0` · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11292.md) `CVE-2026-11292` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11288.md) `CVE-2026-11288` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11282.md) `CVE-2026-11282` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11266.md) `CVE-2026-11266` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11264.md) `CVE-2026-11264` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11263.md) `CVE-2026-11263` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11260.md) `CVE-2026-11260` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11248.md) `CVE-2026-11248` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11247.md) `CVE-2026-11247` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11234.md) `CVE-2026-11234` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11219.md) `CVE-2026-11219` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11206.md) `CVE-2026-11206` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11174.md) `CVE-2026-11174` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-11170.md) `CVE-2026-11170` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-693 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .