<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: himmelblau</title><description>Every new CVE for himmelblau.</description><link>https://agentprime.io/</link><item><title>CVE-2026-45108: Himmelblau: Authentication Bypass via Cross-User Local Session Impersonation in Device Authorization Grant (DAG) Flow</title><link>https://agentprime.io/advisories/CVE-2026-45108/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45108/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 18:53:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34397: himmelblau: NSS fake-primary group lookup reintroduces name collision risk</title><link>https://agentprime.io/advisories/CVE-2026-34397/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34397/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Apr 2026 17:25:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31979: himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache</title><link>https://agentprime.io/advisories/CVE-2026-31979/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31979/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Mar 2026 19:47:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31957: Himmelblau unset domain configuration can allow any-tenant authentication at first login for remote deployments</title><link>https://agentprime.io/advisories/CVE-2026-31957/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31957/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Mar 2026 19:25:21 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-59044: Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)</title><link>https://agentprime.io/advisories/CVE-2025-59044/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59044/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Sep 2025 22:31:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54882: Himmelblau&apos;s Kerberos credential cache collection is world readable</title><link>https://agentprime.io/advisories/CVE-2025-54882/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54882/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 07 Aug 2025 00:02:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54781: Himmelblau leaks an Intune service access token in its logs</title><link>https://agentprime.io/advisories/CVE-2025-54781/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54781/</guid><description>CVSS 2.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Aug 2025 23:35:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53013: Himmelblau offline auth permits authentication with invalid Hello PIN</title><link>https://agentprime.io/advisories/CVE-2025-53013/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53013/</guid><description>CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Jun 2025 18:02:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49012: Himmelblau&apos;s Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass</title><link>https://agentprime.io/advisories/CVE-2025-49012/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49012/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Jun 2025 22:29:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24034: Himmelblau leaks credentials in the debug log</title><link>https://agentprime.io/advisories/CVE-2025-24034/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24034/</guid><description>CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 17:38:57 GMT</pubDate><category>CVE</category></item></channel></rss>