https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:09:09 +0000 https://vulnerability.circl.lu/sighting/e4340672-5e2c-4765-b435-255c874c4eb9/export {"uuid": "e4340672-5e2c-4765-b435-255c874c4eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93445", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxjxzcvy2v2r", "content": "\ud83d\udccc CVE-2026-93445 - IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of c... https://www.cyberhub.blog/cves/CVE-2026-93445", "creation_timestamp": "2026-10-10T17:07:06.847214Z"} {"uuid": "e4340672-5e2c-4765-b435-255c874c4eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93445", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxjxzcvy2v2r", "content": "\ud83d\udccc CVE-2026-93445 - IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of c... https://www.cyberhub.blog/cves/CVE-2026-93445", "creation_timestamp": "2026-10-10T17:07:06.847214Z"} https://vulnerability.circl.lu/sighting/e4340672-5e2c-4765-b435-255c874c4eb9/export Sat, 10 Oct 2026 17:07:06 +0000 https://vulnerability.circl.lu/sighting/07791207-84e8-4c59-a398-690b2e8ec8d6/export {"uuid": "07791207-84e8-4c59-a398-690b2e8ec8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97674", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxjwdo6p7u2u", "content": "\ud83d\udccc CVE-2026-97674 - IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of s... https://www.cyberhub.blog/cves/CVE-2026-97674", "creation_timestamp": "2026-10-10T16:37:07.158162Z"} {"uuid": "07791207-84e8-4c59-a398-690b2e8ec8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97674", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxjwdo6p7u2u", "content": "\ud83d\udccc CVE-2026-97674 - IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of s... https://www.cyberhub.blog/cves/CVE-2026-97674", "creation_timestamp": "2026-10-10T16:37:07.158162Z"} https://vulnerability.circl.lu/sighting/07791207-84e8-4c59-a398-690b2e8ec8d6/export Sat, 10 Oct 2026 16:37:07 +0000 https://vulnerability.circl.lu/sighting/b6ef8605-9eb9-4b59-b69a-d884bf0e748e/export {"uuid": "b6ef8605-9eb9-4b59-b69a-d884bf0e748e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-3HC7-R24J-RPWC", "type": "seen", "source": "https://gist.github.com/alon710/a1728bdb091577eae8b2ca00b65d122b", "content": "# GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja\n\n> **CVSS Score:** 6.8\n> **Published:** 2026-10-09\n> **Full Report:** https://cvereports.com/reports/GHSA-3HC7-R24J-RPWC\n\n## Summary\nA cross-project information disclosure vulnerability in Vikunja allows authenticated users with read access to one project to view private task details from unauthorized projects via subtask expansion parameters.\n\n## TL;DR\nVikunja API endpoints prior to version 2.6.0 fail to apply project-level authorization filters when recursively expanding subtasks, exposing private task metadata across unauthorized project boundaries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200 / CWE-285 / CWE-862\n- **Attack Vector**: Network (Remote REST API)\n- **CVSS v4 Score**: 6.8 (Medium)\n- **Privileges Required**: Low (Authenticated user with access to at least one project)\n- **User Interaction**: None\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Vikunja API prior to version 2.6.0 (code.vikunja.io/api)\n- **Vikunja API**: < 2.6.0 (Fixed in: `2.6.0`)\n\n## Mitigation\n\n- Upgrade Vikunja API component to version 2.6.0 or higher.\n- Filter request parameters matching expand[]=subtasks at the reverse proxy or WAF layer if immediate patching is delayed.\n- Audit existing cross-project subtask relationships across sensitive projects.\n\n**Remediation Steps:**\n1. Identify installed Vikunja API version using GET /api/v1/info.\n2. Update deployment manifests to target tag v2.6.0 or rebuild from commit 077dc4de79ce6f1ab59215a2c7bf9b30423685f2.\n3. Restart the API service and verify subtask expansion requests against restricted projects return 403 or strip unauthorized objects.\n\n## References\n\n- [GitHub Security Advisory GHSA-3hc7-r24j-rpwc](https://github.com/go-vikunja/vikunja/security/advisories/GHSA-3hc7-r24j-rpwc)\n- [Vikunja Pull Request #3688](https://github.com/go-vikunja/vikunja/pull/3688)\n- [Vikunja Fix Commit 077dc4de79ce6f1ab59215a2c7bf9b30423685f2](https://github.com/go-vikunja/vikunja/commit/077dc4de79ce6f1ab59215a2c7bf9b30423685f2)\n- [Vikunja v2.6.0 Release Tag](https://github.com/go-vikunja/vikunja/releases/tag/v2.6.0)\n- [Vikunja Code Repository](https://github.com/go-vikunja/vikunja)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-3HC7-R24J-RPWC) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-10T16:30:30.000000Z"} {"uuid": "b6ef8605-9eb9-4b59-b69a-d884bf0e748e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-3HC7-R24J-RPWC", "type": "seen", "source": "https://gist.github.com/alon710/a1728bdb091577eae8b2ca00b65d122b", "content": "# GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja\n\n> **CVSS Score:** 6.8\n> **Published:** 2026-10-09\n> **Full Report:** https://cvereports.com/reports/GHSA-3HC7-R24J-RPWC\n\n## Summary\nA cross-project information disclosure vulnerability in Vikunja allows authenticated users with read access to one project to view private task details from unauthorized projects via subtask expansion parameters.\n\n## TL;DR\nVikunja API endpoints prior to version 2.6.0 fail to apply project-level authorization filters when recursively expanding subtasks, exposing private task metadata across unauthorized project boundaries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200 / CWE-285 / CWE-862\n- **Attack Vector**: Network (Remote REST API)\n- **CVSS v4 Score**: 6.8 (Medium)\n- **Privileges Required**: Low (Authenticated user with access to at least one project)\n- **User Interaction**: None\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Vikunja API prior to version 2.6.0 (code.vikunja.io/api)\n- **Vikunja API**: < 2.6.0 (Fixed in: `2.6.0`)\n\n## Mitigation\n\n- Upgrade Vikunja API component to version 2.6.0 or higher.\n- Filter request parameters matching expand[]=subtasks at the reverse proxy or WAF layer if immediate patching is delayed.\n- Audit existing cross-project subtask relationships across sensitive projects.\n\n**Remediation Steps:**\n1. Identify installed Vikunja API version using GET /api/v1/info.\n2. Update deployment manifests to target tag v2.6.0 or rebuild from commit 077dc4de79ce6f1ab59215a2c7bf9b30423685f2.\n3. Restart the API service and verify subtask expansion requests against restricted projects return 403 or strip unauthorized objects.\n\n## References\n\n- [GitHub Security Advisory GHSA-3hc7-r24j-rpwc](https://github.com/go-vikunja/vikunja/security/advisories/GHSA-3hc7-r24j-rpwc)\n- [Vikunja Pull Request #3688](https://github.com/go-vikunja/vikunja/pull/3688)\n- [Vikunja Fix Commit 077dc4de79ce6f1ab59215a2c7bf9b30423685f2](https://github.com/go-vikunja/vikunja/commit/077dc4de79ce6f1ab59215a2c7bf9b30423685f2)\n- [Vikunja v2.6.0 Release Tag](https://github.com/go-vikunja/vikunja/releases/tag/v2.6.0)\n- [Vikunja Code Repository](https://github.com/go-vikunja/vikunja)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-3HC7-R24J-RPWC) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-10T16:30:30.000000Z"} https://vulnerability.circl.lu/sighting/b6ef8605-9eb9-4b59-b69a-d884bf0e748e/export Sat, 10 Oct 2026 16:30:30 +0000 https://vulnerability.circl.lu/sighting/4df8e4ac-6252-41ec-9a2d-e9b6d4b25fd4/export {"uuid": "4df8e4ac-6252-41ec-9a2d-e9b6d4b25fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417559199624769", "content": "CVE-2026-108586 1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter 1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not <granted-tag> to list and invoke tools on backend MCP servers outside their granted scopes.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108586https://hackmd.io/@haind/1mcp-negated-tag-filter-oauth-scope-bypasshttps://github.com/1mcp-app/agent/blob/v0.39.0/src/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.ts#L163-L183https://github.com/1mcp-app/agent/blob/v0.39.0/src/transport/http/routes/inspectHelpers.ts#L79-L102https://github.com/1mcp-app/agenthttps://www.vulncheck.com/advisories/1mcp-agent-0.20.0-through-0.39.0-oauth-tag-scope-bypass-via-negated-tag-filter#1mcp-app #@1mcp/agent#CVE_2026_108586#bot", "creation_timestamp": "2026-10-10T16:29:28.833768Z"} {"uuid": "4df8e4ac-6252-41ec-9a2d-e9b6d4b25fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417559199624769", "content": "CVE-2026-108586 1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter 1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not <granted-tag> to list and invoke tools on backend MCP servers outside their granted scopes.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108586https://hackmd.io/@haind/1mcp-negated-tag-filter-oauth-scope-bypasshttps://github.com/1mcp-app/agent/blob/v0.39.0/src/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.ts#L163-L183https://github.com/1mcp-app/agent/blob/v0.39.0/src/transport/http/routes/inspectHelpers.ts#L79-L102https://github.com/1mcp-app/agenthttps://www.vulncheck.com/advisories/1mcp-agent-0.20.0-through-0.39.0-oauth-tag-scope-bypass-via-negated-tag-filter#1mcp-app #@1mcp/agent#CVE_2026_108586#bot", "creation_timestamp": "2026-10-10T16:29:28.833768Z"} https://vulnerability.circl.lu/sighting/4df8e4ac-6252-41ec-9a2d-e9b6d4b25fd4/export Sat, 10 Oct 2026 16:29:28 +0000 https://vulnerability.circl.lu/sighting/6aa4319b-9658-4888-aaaf-9adac65e20af/export {"uuid": "6aa4319b-9658-4888-aaaf-9adac65e20af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108585", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417556556754953", "content": "CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108585https://hackmd.io/@haind/argocd-mcp-delete-application-route-smugglinghttps://github.com/argoproj-labs/mcp-for-argocd/blob/28d15ca69b0c31387cc6ec73d201fd13c5d22b6a/src/argocd/client.ts#L115-L139https://github.com/argoproj-labs/mcp-for-argocd/blob/28d15ca69b0c31387cc6ec73d201fd13c5d22b6a/src/argocd/http.ts#L86-L91https://github.com/argoproj-labs/mcp-for-argocdhttps://www.vulncheck.com/advisories/argocd-mcp-through-0.9.0-path-traversal-via-delete-application-tool#argoproj-labs #argocd-mcp#CVE_2026_108585#bot", "creation_timestamp": "2026-10-10T16:28:48.301709Z"} {"uuid": "6aa4319b-9658-4888-aaaf-9adac65e20af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108585", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417556556754953", "content": "CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108585https://hackmd.io/@haind/argocd-mcp-delete-application-route-smugglinghttps://github.com/argoproj-labs/mcp-for-argocd/blob/28d15ca69b0c31387cc6ec73d201fd13c5d22b6a/src/argocd/client.ts#L115-L139https://github.com/argoproj-labs/mcp-for-argocd/blob/28d15ca69b0c31387cc6ec73d201fd13c5d22b6a/src/argocd/http.ts#L86-L91https://github.com/argoproj-labs/mcp-for-argocdhttps://www.vulncheck.com/advisories/argocd-mcp-through-0.9.0-path-traversal-via-delete-application-tool#argoproj-labs #argocd-mcp#CVE_2026_108585#bot", "creation_timestamp": "2026-10-10T16:28:48.301709Z"} https://vulnerability.circl.lu/sighting/6aa4319b-9658-4888-aaaf-9adac65e20af/export Sat, 10 Oct 2026 16:28:48 +0000 https://vulnerability.circl.lu/sighting/f606e309-7dc4-47cf-aae0-52c20c09078a/export {"uuid": "f606e309-7dc4-47cf-aae0-52c20c09078a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108551", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjuoatyti2w", "content": "\ud83d\udea8 CVE-2026-108551 \u2014 CVSS 9.3 CRITICAL\n\nopenapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers con...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108551\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T16:07:13.849945Z"} {"uuid": "f606e309-7dc4-47cf-aae0-52c20c09078a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108551", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjuoatyti2w", "content": "\ud83d\udea8 CVE-2026-108551 \u2014 CVSS 9.3 CRITICAL\n\nopenapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers con...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108551\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T16:07:13.849945Z"} https://vulnerability.circl.lu/sighting/f606e309-7dc4-47cf-aae0-52c20c09078a/export Sat, 10 Oct 2026 16:07:13 +0000 https://vulnerability.circl.lu/sighting/bc952be3-6852-4d70-a904-3ee472c86cb9/export {"uuid": "bc952be3-6852-4d70-a904-3ee472c86cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17189", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxjuo26kmu2w", "content": "\ud83d\udccc CVE-2026-17189 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulner... https://www.cyberhub.blog/cves/CVE-2026-17189", "creation_timestamp": "2026-10-10T16:07:06.977857Z"} {"uuid": "bc952be3-6852-4d70-a904-3ee472c86cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17189", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxjuo26kmu2w", "content": "\ud83d\udccc CVE-2026-17189 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulner... https://www.cyberhub.blog/cves/CVE-2026-17189", "creation_timestamp": "2026-10-10T16:07:06.977857Z"} https://vulnerability.circl.lu/sighting/bc952be3-6852-4d70-a904-3ee472c86cb9/export Sat, 10 Oct 2026 16:07:06 +0000 https://vulnerability.circl.lu/sighting/e89accfe-0d18-4c3c-9450-2d4e859e6485/export {"uuid": "e89accfe-0d18-4c3c-9450-2d4e859e6485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108549", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjunyt5zt24", "content": "\ud83d\udea8 CVE-2026-108549 \u2014 CVSS 9.2 CRITICAL\n\ncc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhoo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108549\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T16:07:05.898178Z"} {"uuid": "e89accfe-0d18-4c3c-9450-2d4e859e6485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108549", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjunyt5zt24", "content": "\ud83d\udea8 CVE-2026-108549 \u2014 CVSS 9.2 CRITICAL\n\ncc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhoo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108549\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T16:07:05.898178Z"} https://vulnerability.circl.lu/sighting/e89accfe-0d18-4c3c-9450-2d4e859e6485/export Sat, 10 Oct 2026 16:07:05 +0000 https://vulnerability.circl.lu/sighting/a5ce2a19-f772-4d4d-b46c-b1ea71eae00f/export {"uuid": "a5ce2a19-f772-4d4d-b46c-b1ea71eae00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417457166179681", "content": "CVE-2026-108583 zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108583https://hackmd.io/@haind/zotero-mcp-generic-url-metadata-ssrfhttps://github.com/54yyyu/zotero-mcp/blob/v0.14.1/src/zotero_mcp/tools/write.py#L2035-L2089https://github.com/54yyyu/zotero-mcp/issues/326https://www.vulncheck.com/advisories/zotero-mcp-0.10.0-through-0.14.1-ssrf-via-zotero-add-by-url-tool#54yyyu #zotero-mcp#CVE_2026_108583#bot", "creation_timestamp": "2026-10-10T16:03:31.632047Z"} {"uuid": "a5ce2a19-f772-4d4d-b46c-b1ea71eae00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417457166179681", "content": "CVE-2026-108583 zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108583https://hackmd.io/@haind/zotero-mcp-generic-url-metadata-ssrfhttps://github.com/54yyyu/zotero-mcp/blob/v0.14.1/src/zotero_mcp/tools/write.py#L2035-L2089https://github.com/54yyyu/zotero-mcp/issues/326https://www.vulncheck.com/advisories/zotero-mcp-0.10.0-through-0.14.1-ssrf-via-zotero-add-by-url-tool#54yyyu #zotero-mcp#CVE_2026_108583#bot", "creation_timestamp": "2026-10-10T16:03:31.632047Z"} https://vulnerability.circl.lu/sighting/a5ce2a19-f772-4d4d-b46c-b1ea71eae00f/export Sat, 10 Oct 2026 16:03:31 +0000 https://vulnerability.circl.lu/sighting/07e049b2-640b-41da-ba1c-162363d836f6/export {"uuid": "07e049b2-640b-41da-ba1c-162363d836f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417454521016939", "content": "CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108582https://hackmd.io/@haind/genoffice-http-mcp-temp-file-disclosurehttps://github.com/genspark-ai/genoffice/blob/v0.11.505/packages/cli/src/mcp/files.ts#L70-L90https://github.com/genspark-ai/genoffice/releases/tag/v0.11.505https://www.vulncheck.com/advisories/genoffice-through-0.11.505-insecure-permissions-in-http-mcp-server-file-store#genspark-ai #GenOffice#CVE_2026_108582#bot", "creation_timestamp": "2026-10-10T16:02:51.297218Z"} {"uuid": "07e049b2-640b-41da-ba1c-162363d836f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417454521016939", "content": "CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108582https://hackmd.io/@haind/genoffice-http-mcp-temp-file-disclosurehttps://github.com/genspark-ai/genoffice/blob/v0.11.505/packages/cli/src/mcp/files.ts#L70-L90https://github.com/genspark-ai/genoffice/releases/tag/v0.11.505https://www.vulncheck.com/advisories/genoffice-through-0.11.505-insecure-permissions-in-http-mcp-server-file-store#genspark-ai #GenOffice#CVE_2026_108582#bot", "creation_timestamp": "2026-10-10T16:02:51.297218Z"} https://vulnerability.circl.lu/sighting/07e049b2-640b-41da-ba1c-162363d836f6/export Sat, 10 Oct 2026 16:02:51 +0000