<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: aehrc-pathling</title><description>Every new CVE for aehrc-pathling.</description><link>https://agentprime.io/</link><item><title>CVE-2026-47664: Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning</title><link>https://agentprime.io/advisories/CVE-2026-47664/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47664/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 20:28:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47663: Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutation</title><link>https://agentprime.io/advisories/CVE-2026-47663/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47663/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 20:26:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47662: Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs</title><link>https://agentprime.io/advisories/CVE-2026-47662/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47662/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 20:23:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47661: Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read</title><link>https://agentprime.io/advisories/CVE-2026-47661/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47661/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 19:58:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47660: Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration</title><link>https://agentprime.io/advisories/CVE-2026-47660/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47660/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 19:57:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47659: Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}</title><link>https://agentprime.io/advisories/CVE-2026-47659/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47659/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Aug 2026 19:44:00 GMT</pubDate><category>CVE</category></item></channel></rss>