<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: knowns</title><description>Every new CVE for knowns.</description><link>https://agentprime.io/</link><item><title>CVE-2026-88940: knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint</title><link>https://agentprime.io/advisories/CVE-2026-88940/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88940/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 15:28:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88939: knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption</title><link>https://agentprime.io/advisories/CVE-2026-88939/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88939/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 15:28:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88938: knowns through 0.33.0 Path Traversal via code.find MCP tool</title><link>https://agentprime.io/advisories/CVE-2026-88938/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88938/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 15:28:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88937: knowns through 0.33.0 Path Traversal via Template Engine</title><link>https://agentprime.io/advisories/CVE-2026-88937/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88937/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 15:28:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-88899: knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header</title><link>https://agentprime.io/advisories/CVE-2026-88899/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88899/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 15:28:51 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-86775: knowns before 0.30.0 Path Traversal via Document API</title><link>https://agentprime.io/advisories/CVE-2026-86775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86775/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 13:32:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86544: knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions</title><link>https://agentprime.io/advisories/CVE-2026-86544/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86544/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 23:03:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86543: knowns before 0.30.0 Unauthenticated Management API Exposure</title><link>https://agentprime.io/advisories/CVE-2026-86543/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86543/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 23:03:20 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-86542: knowns before 0.30.0 Path Traversal via Import Name</title><link>https://agentprime.io/advisories/CVE-2026-86542/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86542/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 23:03:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86541: knowns before 0.30.0 Path Traversal via code.replace MCP action</title><link>https://agentprime.io/advisories/CVE-2026-86541/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86541/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 23:03:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86539: knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint</title><link>https://agentprime.io/advisories/CVE-2026-86539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86539/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 23:03:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86538: knowns before 0.30.0 Path Traversal via templateFile parameter</title><link>https://agentprime.io/advisories/CVE-2026-86538/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86538/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 23:03:17 GMT</pubDate><category>CVE</category></item></channel></rss>