<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sim</title><description>Every new CVE for sim.</description><link>https://agentprime.io/</link><item><title>CVE-2026-86115: Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path</title><link>https://agentprime.io/advisories/CVE-2026-86115/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86115/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 05 Sep 2026 09:59:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13510: SimStudioAI sim Password Protection deployment.ts weak hash</title><link>https://agentprime.io/advisories/CVE-2026-13510/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13510/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 28 Jun 2026 22:15:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3432: Sim Studio AI - Unauthenticated OAuth Token Theft</title><link>https://agentprime.io/advisories/CVE-2026-3432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3432/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Mar 2026 13:01:05 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-3431: Sim Studio AI - MongoDB SSRF and Arbitrary Document Deletion</title><link>https://agentprime.io/advisories/CVE-2026-3431/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3431/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Mar 2026 13:00:58 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-15099: simstudioai sim CRON Secret internal.ts improper authentication</title><link>https://agentprime.io/advisories/CVE-2025-15099/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15099/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Dec 2025 04:02:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10096: SimStudioAI sim route.ts server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2025-10096/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10096/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Sep 2025 15:32:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9805: SimStudioAI sim route.ts server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2025-9805/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9805/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Sep 2025 00:02:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9801: SimStudioAI sim path traversal</title><link>https://agentprime.io/advisories/CVE-2025-9801/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9801/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Sep 2025 23:02:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9800: SimStudioAI sim HTML File route.ts import unrestricted upload</title><link>https://agentprime.io/advisories/CVE-2025-9800/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9800/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Sep 2025 22:32:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-7114: SimStudioAI sim Session route.ts POST missing authentication</title><link>https://agentprime.io/advisories/CVE-2025-7114/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7114/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Jul 2025 05:32:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-7107: SimStudioAI sim route.ts handleLocalFile path traversal</title><link>https://agentprime.io/advisories/CVE-2025-7107/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7107/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Jul 2025 02:02:07 GMT</pubDate><category>CVE</category></item></channel></rss>