CVE Vulnerability Catalog

Insecure Direct Object Reference (IDOR) vulnerability in PraisonAI Platform before version 0.1.4. Dependency endpoints do not verify that issue and dependency IDs belong to the checked workspace, allowing an attacker to create links between any issues in the database.

Vulnerability in PraisonAI Platform before version 0.1.4. Broken access control in workspace management routes allows any authenticated low-privilege member to escalate their role to owner.

In PraisonAI Platform before version 0.1.4, workspace-scoped REST routes have an object-level authorization flaw allowing an authenticated user from one workspace to access objects of another workspace by supplying the victim's global UUID.

A vulnerability in PraisonAI versions prior to 4.6.40 allows arbitrary code execution through unguarded spec.loader.exec_module calls in agents_generator.py. These functions accept a module_path parameter from YAML configuration and execute it without validation, allowing an attacker to execute remote code.

Vulnerability in PraisonAI (versions prior to 4.6.40) where hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. The write_file function skips path validation when workspace=None (always in production).

A denial of service vulnerability in react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages versions 19.0.0-19.0.7, 19.1.0-19.1.8, and 19.2.0-19.2.7. Specially crafted HTTP requests to server function endpoints can cause excessive CPU usage.

SQL injection and security boundary bypass vulnerability in the bigquery-forecast tool of googleapis/mcp-toolbox. An attacker can inject malicious SQL queries via client-controlled parameters, bypassing the allowedDatasets mechanism and accessing arbitrary BigQuery tables.

Vulnerability in BuildKit allows a malicious Git source, when git.checkoutbundle=true is set, to execute a crafted command on the host during checkout.

A malicious BuildKit client or frontend can craft a request that causes the BuildKit daemon to crash with a panic.

In BuildKit, a crafted message in the low-level build API can be used to remove the contents of the /tmp directory. The action normally used to delete files inside the build container rootfs can escape into the real host temp directory.

Vulnerability in BuildKit. A custom client can send an upload request that allows files to escape from the BuildKit-controlled state directory. Requires valid permissions to access the BuildKit control API.

Vulnerability in Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2. An authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files, write files to arbitrary directories, or determine whether specific files exist on the server.

A path traversal vulnerability in the backup-restore function of Home Assistant Core before 2026.7.0 allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry. Because the official Docker image runs the process as root, attackers can achieve remote code execution by overwriting auto-imported Python paths such as site-packages/sitecustomize.py.

Vulnerability in PraisonAI (versions before 4.6.40) – incomplete fix for previous flaw (CVE-2026-44336). An unauthenticated attacker can read any file on the host (e.g., /etc/passwd, SSH keys) via MCP tools/call to praisonai.workflow.show.

Vulnerability in snap-confine (snapd component). A local unprivileged attacker can escalate privileges to root by bypassing security restrictions in set-capabilities configuration.

Ninja Forms WordPress plugin version 3.14.8 and earlier contains an improper input validation vulnerability. Unauthenticated attackers can inject arbitrary numeric values into form calculations and payment totals by submitting values that do not match any configured option in ListSelect or ListRadio fields. This can lead to manipulation of payment amounts, including setting them to zero.

Vulnerability in the libssh library on servers with GSSAPIKeyExchange enabled. The gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.

Vulnerability in @nevware21/ts-utils library before version 0.14.0. The _copyProps function does not check hasOwnProperty and does not filter dangerous keys (__proto__, constructor, prototype), allowing an attacker to pollute the prototype chain of all objects in the application.

Vulnerability in snapd (Canonical) in the snap-confine component. Default seccomp templates do not block operations creating files with setuid flags, allowing applications in strict snap sandboxes to create and execute setuid binaries, bypassing security restrictions. Fixed by hardening the seccomp template engine.

In D-Link DNS-320 version 1.0.2, an unknown function in /web/jquery/uploader/multi_uploadify.php is vulnerable to unrestricted file upload via the Filedata[] argument. The attack can be executed remotely and the exploit is publicly available.