<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: hashicorp-tooling</title><description>Every new CVE for hashicorp-tooling.</description><link>https://agentprime.io/</link><item><title>CVE-2026-110720: Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules</title><link>https://agentprime.io/advisories/CVE-2026-110720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110720/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 18:38:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-87993: Consul-template vulnerable to an information disclosure issue in error handling</title><link>https://agentprime.io/advisories/CVE-2026-87993/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-87993/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 19:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8715: Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath</title><link>https://agentprime.io/advisories/CVE-2026-8715/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8715/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 20:27:39 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-16326: consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode</title><link>https://agentprime.io/advisories/CVE-2026-16326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16326/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Jul 2026 18:40:08 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-16328: consul-mcp-server vulnerable to server side request forgery leading to token exposure</title><link>https://agentprime.io/advisories/CVE-2026-16328/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16328/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Jul 2026 18:32:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16498: terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode</title><link>https://agentprime.io/advisories/CVE-2026-16498/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16498/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 17:57:45 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-16496: terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user</title><link>https://agentprime.io/advisories/CVE-2026-16496/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16496/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 17:57:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14869: terraform-mcp-server vulnerable to server side request forgery leading to token exposure</title><link>https://agentprime.io/advisories/CVE-2026-14869/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14869/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 17:53:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14361: Consul-template is vulnerable to path redirection in writeToFile through symlink attack</title><link>https://agentprime.io/advisories/CVE-2026-14361/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14361/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 20:11:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5061: Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack</title><link>https://agentprime.io/advisories/CVE-2026-5061/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5061/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 13:58:20 GMT</pubDate><category>CVE</category></item></channel></rss>