agentprime: warp-tech-warpgateEvery new CVE for warp-tech-warpgate.https://agentprime.io/CVE-2026-91163: Warpgate: Kubernetes listener discloses internal error text to an unauthenticated callerhttps://agentprime.io/advisories/CVE-2026-91163/https://agentprime.io/advisories/CVE-2026-91163/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:19:15 GMTCVECVE-2026-91168: Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name accounthttps://agentprime.io/advisories/CVE-2026-91168/https://agentprime.io/advisories/CVE-2026-91168/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:17:23 GMTCVECVE-2026-91167: Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundaryhttps://agentprime.io/advisories/CVE-2026-91167/https://agentprime.io/advisories/CVE-2026-91167/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:54:38 GMTCVECVE-2026-91166: Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the targethttps://agentprime.io/advisories/CVE-2026-91166/https://agentprime.io/advisories/CVE-2026-91166/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:53:56 GMTCVECVE-2026-91165: Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error valueshttps://agentprime.io/advisories/CVE-2026-91165/https://agentprime.io/advisories/CVE-2026-91165/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:53:03 GMTCVECVE-2026-91164: Warpgate: API tokens bypass the user's allowed_ip_ranges restrictionhttps://agentprime.io/advisories/CVE-2026-91164/https://agentprime.io/advisories/CVE-2026-91164/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:50:40 GMTCVECVE-2026-63330: Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessionshttps://agentprime.io/advisories/CVE-2026-63330/https://agentprime.io/advisories/CVE-2026-63330/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:49:45 GMTCVECVE-2026-63329: Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targetshttps://agentprime.io/advisories/CVE-2026-63329/https://agentprime.io/advisories/CVE-2026-63329/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:49:01 GMTCVECVE-2026-58491: Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameterhttps://agentprime.io/advisories/CVE-2026-58491/https://agentprime.io/advisories/CVE-2026-58491/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:48:03 GMTCVEcriticalCVE-2026-44347: Warpgate: SSO CSRF -- State Token Not Validated on Returnhttps://agentprime.io/advisories/CVE-2026-44347/https://agentprime.io/advisories/CVE-2026-44347/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 22:44:17 GMTCVECVE-2023-48712: User authorization bug leading to privilege escalation in warpgatehttps://agentprime.io/advisories/CVE-2023-48712/https://agentprime.io/advisories/CVE-2023-48712/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Nov 2023 17:02:59 GMTCVECVE-2023-43660: SSH key password bypassed in warpgatehttps://agentprime.io/advisories/CVE-2023-43660/https://agentprime.io/advisories/CVE-2023-43660/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Sep 2023 21:00:29 GMTCVECVE-2023-37268: User login confusion with SSO in warpgatehttps://agentprime.io/advisories/CVE-2023-37268/https://agentprime.io/advisories/CVE-2023-37268/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Jul 2023 21:02:00 GMTCVE