Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- criticalCVE-2026-50027
CVE-2026-50027: mcp-memory-service Missing Authentication on Document API Endpoints
All seven file/document endpoints in mcp-memory-service accepted requests without any credentials, letting anyone on the network read, write, or delete stored AI memories even when API-key or OAuth…
- highCVE-2026-50163
CVE-2026-50163: oras-go Hardlink Path Traversal via CWD Resolution
A crafted OCI artifact with a tar hardlink entry pointing to a relative path can trick oras-go into linking files outside the extraction directory, exposing arbitrary files in the caller's working…
- highCVE-2026-53712
CVE-2026-53712: scram-client SCRAM Channel-Binding Silent Authentication Downgrade
A flaw in the OnGres SCRAM Java library lets a TLS man-in-the-middle silently strip channel binding from a SCRAM-SHA-256-PLUS login, defeating the only protection that channelBinding=require is…
- highCVE-2026-50138
CVE-2026-50138: goshs WebDAV Mode-Flag Access Control Bypass
When goshs is started with WebDAV enabled, the --read-only, --upload-only, and --no-delete restriction flags are silently ignored on the WebDAV port, letting any authenticated client write, delete…
- highCVE-2026-50151
CVE-2026-50151: oras-go Credential Leak via Unvalidated Location Header in Blob Upload
A malicious OCI registry can redirect oras-go's blob upload to an attacker-controlled server and steal the caller's registry credentials by returning a cross-host Location header.
- highCVE-2026-49998
CVE-2026-49998: Centrifugo Cross-Issuer JWT Authentication Bypass via JWKS Kid Cache Collision
In Centrifugo's multi-tenant dynamic JWKS setup, a valid token for one tenant can silently authenticate as a completely different tenant because the key cache is keyed only by kid, not by which JWKS…
- highCVE-2026-41053
CVE-2026-41053: Rancher GitHub App Auth Over-Inclusive Team Membership Expansion
A logic bug in Rancher's GitHub App authentication provider gives any org member the group permissions of every team in the organization, not just the teams they actually belong to.
- criticalCVE-2026-41052
CVE-2026-41052: Rancher Project Owner Privilege Escalation to Host
A Rancher user with Project Owner access can relabel a namespace to use the 'privileged' Pod Security Admission profile, then deploy containers that break out of standard isolation and reach…
- criticalCVE-2026-49457
CVE-2026-49457: erlang/quic Broken TLS Certificate Verification (MITM)
Every erlang/quic client connection before version 1.4.4 skipped all three TLS server authentication checks, letting any attacker on the network path impersonate any server by presenting an…
- highCVE-2026-44938
CVE-2026-44938: Rancher Fleet Pod Security Standards Bypass via namespaceLabels
Anyone with git push access to a Fleet-monitored repository could silently downgrade the Pod Security Standards level on a Kubernetes namespace, letting them deploy privileged or otherwise…
- highCVE-2026-44937
CVE-2026-44937: Rancher Fleet Unauthenticated Webhook Regex Injection via Unsanitized Repository URL
When Fleet's webhook endpoint runs without a shared secret, an attacker can send a forged webhook request containing regex metacharacters in the repository URL or path field, causing Fleet to match…
- criticalCVE-2026-44935
CVE-2026-44935: Rancher Fleet Cross-Namespace Secret Disclosure via Unvalidated valuesFrom
A flaw in Rancher Fleet lets any tenant read Kubernetes secrets from other namespaces on a shared downstream cluster, by pointing the valuesFrom field in a fleet.yaml or HelmOp resource at an…