Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- high
dynatrace-mcp-server Unauthenticated HTTP MCP Tool Invocation
Any attacker who can reach the server's HTTP port can invoke powerful Dynatrace tools, including arbitrary log queries, without supplying any credentials, because the HTTP transport mode performs no…
- criticalCVE-2025-4318
CVE-2025-4318: @aws-amplify/codegen-ui-react Eval Injection (RCE)
A missing input-validation check in AWS Amplify Studio's code generator lets any authenticated user drop arbitrary JavaScript into a component schema property and have it executed on the build server.
- criticalCVE-2026-66066
CVE-2026-66066: Active Storage Arbitrary File Read via libvips Unfuzzed Loaders
A default Rails app that accepts image uploads and uses libvips for variant processing lets an unauthenticated attacker read any file the app process can access, including secrets that can escalate…
- highCVE-2026-54722
CVE-2026-54722: dssrf SSRF Bypass via Userinfo Stripping
The dssrf library's URL safety check can be tricked into approving requests to internal IP addresses by placing credentials before the host in the URL, causing the validator to inspect the wrong…
- highCVE-2026-67425
CVE-2026-67425: flyto-core LLM API Key Exfiltration via Caller-Controlled base_url
flyto-core's llm.chat module automatically attaches the operator's LLM API key to any URL the caller supplies, letting an attacker receive the key on their own server just by pointing base_url at it.
- criticalCVE-2026-67426
CVE-2026-67426: flyto-core Unauthenticated SSRF and Runner Secret Exfiltration
The flyto-verification sidecar service accepts workflow run requests from anyone on the network, then forwards your internal runner secret to whatever URL the attacker supplies.
- highCVE-2026-67428
CVE-2026-67428: flyto-core Missing SSRF Guard on HTTP Modules
Over a dozen HTTP-emitting modules in flyto-core skip the project's own SSRF guard function entirely, letting any authenticated workflow author point a URL at the cloud metadata endpoint or an…
- highCVE-2026-67424
CVE-2026-67424: flyto-core SSRF via Unvalidated HTTP Redirect
The http.get, http.request, and http.batch modules in flyto-core only check the initial URL against the SSRF guard, then silently follow 302 redirects into internal or cloud-metadata addresses…
- highCVE-2026-67432
CVE-2026-67432: mcp (Ruby SDK) Unbounded Request Body Memory Exhaustion
Any MCP Ruby SDK HTTP server can be crashed by one unauthenticated POST because the transport reads the entire request body into memory with no size limit, letting an attacker inflate the worker…
- criticalCVE-2026-67429
CVE-2026-67429: flyto-core Arbitrary File Write via image.download
A path-traversal flaw in flyto-core lets an attacker write any content to any path on the server by pointing image.download at an attacker-controlled URL and passing a root-anchored output_dir…
- criticalCVE-2026-54680
CVE-2026-54680: kube-logging/logging-operator Fluentd Configuration Injection RCE
A tenant who can create Flow resources in any watched namespace can inject arbitrary Fluentd configuration into the shared aggregator and execute commands inside it, because CRD values are written…
- high
netfoil: Incorrect Block Response Sends Traffic to Localhost
A DNS filtering tool used on Linux sent blocked domain queries to the local machine instead of dropping them, because it returned 0.0.0.0 in a valid DNS answer rather than a proper NXDOMAIN response.