Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-54640

  CVE-2026-54640: OpenRemote KNXProtocol XXE Arbitrary File Read

  An incomplete security fix left the KNX asset import handler in OpenRemote unprotected against XML External Entity injection, letting any logged-in user read sensitive files off the server by…

• highCVE-2026-55076

  CVE-2026-55076: Coder OIDC email_verified Type Coercion Authentication Bypass

  A flaw in Coder's OIDC login lets an attacker register a victim's email address at any compatible identity provider without verifying it, then sign in and inherit the victim's existing Coder account…

• highCVE-2026-55075

  CVE-2026-55075: Coder OIDC Account Takeover via Email Fallback and email_verified Bypass

  Two flaws in Coder's OIDC login can be chained to let an attacker authenticate as a different user by matching their email address and bypassing the email verification check.

• highCVE-2026-55428

  CVE-2026-55428: Coder Tailnet Coordinator Route Hijacking via Unvalidated AllowedIPs

  A rogue Coder workspace agent can steal another agent's tailnet address by advertising it as its own routing prefix, letting it intercept web terminal and app traffic meant for the victim workspace.

• criticalCVE-2026-53486

  CVE-2026-53486: @xhmikosr/decompress Path Traversal, Symlink Escape, and Setuid File Creation

  A crafted archive extracted with @xhmikosr/decompress (and the unmaintained upstream decompress package) can write files outside the target directory, expose arbitrary files via hardlinks, and…

• criticalCVE-2026-54760

  CVE-2026-54760: langroid SQLChatAgent pg_read_file Blocklist Bypass

  Langroid's SQLChatAgent blocks dangerous PostgreSQL file-read functions by regex, but quoting the function name, inserting an inline comment, or schema-qualifying it bypasses the check entirely…

• highCVE-2026-54771

  CVE-2026-54771: langroid Unauthorized Tool Invocation via User-Supplied JSON

  A user chatting with a Langroid application can directly invoke backend tool handlers by sending raw JSON, bypassing the use=False restriction that developers expect to block end-user tool access.

• highCVE-2026-55787

  CVE-2026-55787: flyto-core SSRF Guard Bypass via IPv6 Transition Addresses

  flyto-core's SSRF protection can be bypassed using IPv6 transition address forms like ::ffff:127.0.0.1 or 64:ff9b::a9fe:a9fe, letting a workflow author drive authenticated HTTP fetches to internal…

• highCVE-2026-55786

  CVE-2026-55786: flyto-core Unauthenticated OS Command Injection via HTTP MCP

  flyto-core's HTTP MCP endpoint accepts JSON-RPC requests with no authentication check, letting any local process run arbitrary shell commands by calling the built-in sandbox.execute_shell module.

• highCVE-2026-35338

  CVE-2026-35338: uu_chmod --preserve-root Bypass via Unresolved Path

  The Rust rewrite of chmod trusts the raw argument string rather than the resolved filesystem path, so passing '/../' instead of '/' silently bypasses the --preserve-root guard and lets a recursive…

• criticalCVE-2026-49445

  CVE-2026-49445: Cilium Envoy Admin Socket World-Accessible Permission Misconfiguration

  When Cilium L7 policies are active, the Envoy admin Unix socket is created with world-accessible permissions, letting any local user on the node read TLS secrets, drain connections, or kill the…

• highCVE-2022-46292

  CVE-2022-46292: Open Babel MOPAC Output Parser Out-of-Bounds Write (UNIT CELL TRANSLATION)

  Opening a crafted MOPAC output file with Open Babel causes the parser to write past the end of a fixed-size stack array, which can corrupt the stack and lead to arbitrary code execution.