agentprime: eugeny-tabbyEvery new CVE for eugeny-tabby.https://agentprime.io/CVE-2026-72903: Tabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directoryhttps://agentprime.io/advisories/CVE-2026-72903/https://agentprime.io/advisories/CVE-2026-72903/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:39:57 GMTCVECVE-2026-46709: Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)https://agentprime.io/advisories/CVE-2026-46709/https://agentprime.io/advisories/CVE-2026-46709/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 14:59:18 GMTCVECVE-2026-45038: Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Executionhttps://agentprime.io/advisories/CVE-2026-45038/https://agentprime.io/advisories/CVE-2026-45038/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 16:48:12 GMTCVECVE-2026-45036: Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zshhttps://agentprime.io/advisories/CVE-2026-45036/https://agentprime.io/advisories/CVE-2026-45036/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 16:47:17 GMTCVECVE-2026-45035: Tabby: RCE via `tabby://run` URL Schemehttps://agentprime.io/advisories/CVE-2026-45035/https://agentprime.io/advisories/CVE-2026-45035/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 16:41:11 GMTCVEcriticalCVE-2026-45037: Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocationhttps://agentprime.io/advisories/CVE-2026-45037/https://agentprime.io/advisories/CVE-2026-45037/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 16:40:10 GMTCVECVE-2025-22136: Tabby has a TCC Bypass via Misconfigured Node Fuseshttps://agentprime.io/advisories/CVE-2025-22136/https://agentprime.io/advisories/CVE-2025-22136/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jan 2025 16:02:01 GMTCVECVE-2024-55950: Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabbyhttps://agentprime.io/advisories/CVE-2024-55950/https://agentprime.io/advisories/CVE-2024-55950/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Dec 2024 21:52:44 GMTCVE