Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- highCVE-2026-53657
CVE-2026-53657: Lima QEMU Guest Agent Socket World-Writable Privilege Escalation
A world-writable Unix socket on Lima's QEMU guest agent let any unprivileged user inside the VM send unauthenticated gRPC calls to a root-owned service, escalating to root within the guest.
- highCVE-2026-53660
CVE-2026-53660: OpenAM Insecure SSO Cookie Initialization (Missing HttpOnly and SameSite)
OpenAM shipped its primary SSO cookie without the HttpOnly flag by default, letting any same-origin JavaScript steal authenticated sessions and silently approve attacker-controlled OAuth consent…
- highCVE-2026-35511
CVE-2026-35511: Authorizer Zero-Click Account Takeover via OAuth Identity Linking
Authorizer's OAuth callback handler links a Google or GitHub login to any existing account with a matching email address, even if that account's email was never verified, letting an attacker who…
- highCVE-2026-73654
CVE-2026-73654: @trigger.dev/core Prototype Pollution via Run Metadata Operations
A low-privilege API key holder can pollute Object.prototype in the shared Trigger.dev webapp process with a single HTTP request, crashing the server for all tenants and breaking other tenants' worker…
- highCVE-2026-12243
CVE-2026-12243: nltk Arbitrary File Read via Percent-Encoded Path Traversal
NLTK's resource loader accepts percent-encoded dot-dot sequences like %2e%2e that bypass its safety checks before decoding, letting an attacker read any file the process can access.
- highCVE-2026-54526
CVE-2026-54526: Argo Workflows ArtifactGC.PodSpecPatch Allow-List Bypass
A low-privileged user can inject an arbitrary Kubernetes pod spec patch into the artifact garbage-collection pod in Argo Workflows, completely defeating the Strict/Secure template-referencing…
- high
atomic-agents-stack: Dashboard HTTP Server Path Traversal Allows Arbitrary File Read
The built-in dashboard web server in atomic-agents-stack served files from any path the attacker requested, letting anyone who can reach the port read files outside the intended directory, including…
- highCVE-2026-55072
CVE-2026-55072: Pimcore ClassDefinition UID Regex Missing End Anchor Allows SQL Injection
A missing end-anchor in Pimcore's class UID validation regex lets a low-privileged editor sneak SQL into a class ID, which then executes unquoted inside Block.php when any object of that class is…
- highCVE-2026-55074
CVE-2026-55074: ansible-jailexec Jail Escape via Symlink Following in put_file
A symlink placed inside a managed FreeBSD jail tricks ansible-jailexec into writing attacker-controlled content to any path on the host as root, breaking out of the jail entirely.
- high
SIPSorcery SCTP SACK Chunk Out-of-Bounds Read DoS
A crafted WebRTC SCTP SACK packet with an inflated gap-ack-block count can force SIPSorcery to read past its receive buffer, crashing the SCTP thread and permanently killing all data channels.
- high
SIPSorcery TurnServer UDP Receive Loop Denial of Service
A single malformed UDP packet sent to a SIPSorcery TURN server permanently kills UDP relay for all connected clients, requiring a full process restart to recover.
- highCVE-2026-54917
CVE-2026-54917: SeaweedFS Path Traversal in S3 and Iceberg REST Gateways
A missing path segment check in SeaweedFS's S3 and Iceberg REST gateways lets any caller use dot-dot sequences in the URL to read or write objects in buckets they were never given access to.