Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• criticalCVE-2026-54133

  CVE-2026-54133: jmespath.php CompilerRuntime Code Injection via Unescaped Function Names

  A flaw in jmespath.php's compiler runtime lets an attacker smuggle arbitrary PHP code into a cached file by crafting a JMESPath expression that uses a raw string or literal as a function name, which…

• high

  MONAI nnUNetV2Runner OS Command Injection via dataset_name_or_id

  MONAI's nnUNetV2Runner passes a YAML-supplied dataset name directly into a shell command without sanitization, letting an attacker run arbitrary OS commands by embedding shell metacharacters in a…

• high

  MONAI algo_from_pickle() Unsafe Pickle Deserialization RCE (Incomplete Fix)

  MONAI's algo_from_pickle() function loads attacker-supplied pickle files with no restrictions, letting anyone who can place a malicious .pkl file on the system run arbitrary code with the privileges…

• high

  MONAI NumpyReader Unsafe Deserialization via allow_pickle=True

  MONAI's NumpyReader hardcoded allow_pickle=True when loading .npy and .npz files, letting an attacker execute arbitrary code by embedding a malicious pickle payload in any medical imaging dataset…

• highCVE-2026-55178

  CVE-2026-55178: GeoLens Cross-Dataset Authorization Bypass

  Six endpoints in GeoLens checked access for the resource in the URL but never re-checked a second dataset they silently read through, letting anonymous callers dump private map metadata, vector…

• highCVE-2026-55839

  CVE-2026-55839: Kestra Stored XSS via Custom Markdown [[link]] Attribute Injection

  A flaw in Kestra's custom Markdown renderer lets anyone who can write a Flow description inject JavaScript event handlers that execute in other users' browsers.

• highCVE-2026-69220

  CVE-2026-69220: RabbitMQ Java Client Uncontrolled Recursion DoS via Nested AMQP Tables

  A malicious AMQP server can crash any RabbitMQ Java client application before authentication completes by sending a deeply nested table structure that overflows the JVM call stack.

• highCVE-2026-69219

  CVE-2026-69219: RabbitMQ Java Client Unchecked LongString Allocation DoS

  A malicious AMQP server can crash any connecting Java application by sending a single oversized field length value that forces the client to attempt a ~2 GB memory allocation before reading any data.

• highCVE-2026-63337

  CVE-2026-63337: RabbitMQ amqp-client Unsafe Reflection via JSON-RPC javaReturnType

  A malicious RabbitMQ broker or co-tenant can send a crafted JSON-RPC service description that causes the Java client to load and initialize arbitrary classes on the victim's JVM, potentially…

• high

  atomic-agents-stack: HTTP MCP Catalog MITM to RCE via Cleartext Command Injection

  When an atomic-agents-stack application fetches its MCP server catalog over plain HTTP, any network attacker sitting between the agent host and the catalog server can rewrite the response to inject…

• highCVE-2026-53659

  CVE-2026-53659: http4k-core Unbounded Gzip Decompression DoS

  Any unauthenticated client can crash an http4k server by sending a tiny gzip-compressed request body that expands to gigabytes, exhausting the JVM heap.

• highCVE-2026-56677

  CVE-2026-56677: 9router Unauthenticated SSRF via OIDC Test Endpoint

  Any unauthenticated user can point 9router's OIDC test endpoint at an internal IP address, turning the dashboard server into a proxy for scanning and reading private network services.