CSSA Exclusive Early Warning10.0 Critical
QwenPaw Console Malicious Plugin Upload Leading to Remote Code Execution
An attacker can exploit the plugin upload interface, which lacks strict validation, to submit archive files carrying malicious code. Because the server lacks file type allowlist enforcement and sandboxed isolation during loading, it will directly deserialize or dynamically execute the uploaded content, thereby triggering underlying command injection. This vulnerability is network-reachable and requires no prior authentication; successful exploitation results in full control over the host environment, leading to the compromise of core assets and disruption of business continuity.
Component
QwenPaw is an open-source framework for AI agent development and management. Its core architecture adopts a front-end and back-end separated design, w…
Type
Unrestricted Upload of Dangerous File Types (CWE-434)
Repo
Remediation- It is recommended to enforce strict file extension allowlist validation on the upload interface and disable parsing of dangerous file types. Combined with storage isolation strategies that place files outside the web directory, a sandbox mechanism should be introduced to block the loading of malicious code.
CSSA Exclusive Early Warning10.0 Critical
hermes-agent exploited via unverified plugin auto-loading leading to loss of server control
An attacker can exploit the code-pulling module, which lacks integrity verification, by triggering a public interface to clone a malicious repository into the plugin directory. This vulnerability stems from the auto-loading mechanism's lack of cryptographic signature verification and sandbox isolation. Combined with the absence of network access controls in the attack chain, the vulnerability is network-reachable and requires only a crafted malicious request to achieve underlying command execution. Affected systems face threats including sensitive data theft, credential leakage, and persistent backdoor implantation.
Component
hermes-agent is an agent framework designed for automated workflow orchestration. Its core architecture includes a visual dashboard interface and an e…
Type
Download of Code Without Integrity Check (CWE-494)
Repo
Remediation- It is recommended to introduce strong authentication mechanisms to restrict external interface calls, enforce digital signature verification and hash comparison on dynamically pulled code files, disable unnecessary auto-loading functionality, and use network access control lists to strictly limit the range of trusted source addresses.
CVE-2026-53412CVSS 9.8 Critical2026-07-17
Zoom Windows Client Improper Input Validation Leading to Account Takeover
A critical security flaw exists in the Zoom Windows desktop client, Zoom Windows VDI client, and Zoom Windows Meeting SDK due to improper input validation (CWE-20). An unauthenticated attacker can carry out an account takeover via network access. The vulnerability allows an attacker to remotely exploit the network interface without any user interaction, thereby gaining full control of the victim's Zoom account. This vulnerability affects all users of unpatched Zoom Windows-related components. An attacker only needs to launch the attack over the network to exploit the vulnerability, requiring no local privileges and enabling full remote exploitation.
Component
Zoom is a widely used video conferencing and collaboration software that provides a desktop client, VDI client, and Meeting SDK, supporting real-time audio and video communication worldwide.
Risks
- Complete account takeover: An attacker can gain unauthorized full control of the victim's Zoom account, accessing meeting history, contact lists, and sensitive communications.
- Privacy breach and data tampering: Since the confidentiality, integrity, and availability impacts are all rated High, an attacker can steal sensitive information or tamper with meeting data.
- Unauthenticated remote attack: The attack vector is over the network (NETWORK), requiring no privileges (PR:N) and no user interaction (UI:N), with low attack complexity (AC:L), making it highly susceptible to automated exploitation.
Source
Remediation- Enable multi-factor authentication (MFA) to enhance account security.authentication (MFA) to enhance account security.
- Monitor network traffic for abnormal unauthorized access attempts targeting Zoom services.
CVE-2026-44181CVSS 9.8 Critical2026-07-17
Jupyter Enterprise Gateway Server-Side Template Injection Vulnerability Leading to Remote Code Execution
In Jupyter Enterprise Gateway versions 2.0.0rc2 and above but below 3.3.0, the Kubernetes manifest rendering module contains a Server-Side Template Injection (SSTI, CWE-1336) security flaw due to improper handling of environment variables (KERNEL_XXX). By injecting Jinja2 template expressions into environment variables, an attacker can execute arbitrary Python code and operating system commands within the Enterprise Gateway service. This vulnerability allows an attacker to steal Kubernetes service account tokens and secrets, and subsequently gain full control of the Kubernetes cluster by scheduling privileged Pods or Pods with hostPath volume mounts. This issue has been fixed in version 3.3.0.
Component
Jupyter Enterprise Gateway is a service component that enables launching remote Jupyter Notebook kernels on distributed clusters such as Apache Spark, Kubernetes, and Docker Swarm.
Risks
- Full cluster takeover: An attacker can exploit this vulnerability to steal Kubernetes service account tokens and secrets, and subsequently gain complete control of the Kubernetes cluster
- Arbitrary code execution: An attacker can execute arbitrary Python code and operating system commands within the Enterprise Gateway service process
- Lateral movement and persistence: By scheduling privileged Pods or Pods with hostPath volume mounts, an attacker can penetrate the underlying host machines and achieve persistent control
Source
Remediation- Immediately upgrade Jupyter Enterprise Gateway to version 3.3.0 or latery to version 3.3.0 or later
- Strictly restrict Kubernetes service account permissions by following the principle of least privilege
- Monitor the Enterprise Gateway service for anomalous process creation and resource access behavior
CVE-2023-49899CVSS 9.8 Critical2026-07-16
Affected Devices Allow Remote Command Execution Due to Missing Validation of Communication Channel Origin
Affected devices contain a source validation error (CWE-346) security flaw caused by improper validation of the origin of communication channels. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device. The vulnerability allows an attacker to launch an attack over the network, achieving full control of the affected system without any user interaction or privileges. The vulnerability affects all devices that have not patched this flaw; an attacker only needs to send a specially crafted network request to trigger exploitation, resulting in complete system takeover.
Component
The affected devices contain a module that handles network communication channels, responsible for receiving and processing external connection requests.
Risks
- Complete system control: An attacker can exploit this vulnerability to execute arbitrary code on the victim system, and depending on user privileges, install programs, view/modify/delete data, or create new accounts with full privileges
- No user interaction required: An attacker does not need to trick a user into performing any action; simply sending a malicious request over the network is sufficient to trigger the vulnerability
- High confidentiality and integrity impact: An attacker can steal sensitive data and tamper with system state, resulting in data breaches and abnormal system behavior
Source
Remediation- Strictly validate the origin and identity of all inbound communication channelsthe origin and identity of all inbound communication channels
- Implement network-layer access control lists (ACLs) to restrict trusted sources
- Monitor anomalous command execution logs and deploy an intrusion detection system
CVE-2023-49900CVSS 9.8 Critical2026-07-16
Unauthenticated Remote Code Execution Vulnerability via SetParameter Command
In the affected component, the SetParameter command contains an OS command injection security flaw (CWE-78) due to improper sanitization of user-supplied input. An unauthenticated remote attacker can exploit this vulnerability to achieve remote code execution. The vulnerability allows an attacker to launch an attack directly over the network without requiring any user interaction or privileged credentials, resulting in complete control of the affected system. The vulnerability affects all unpatched instances of the relevant service; an attacker only needs to send a specially crafted SetParameter request to exploit it, leading to full system takeover.
Component
The component exposes a SetParameter command interface for handling parameter configuration. Due to the lack of strict validation and sanitization of input data, injection of malicious commands is possible.
Risks
- Complete system control: An attacker can exploit this vulnerability to execute arbitrary code on the victim system, and depending on user privileges, install programs, view/modify/delete data, or create new accounts with full privileges
- No user interaction required: An attacker does not need to trick a user into performing any action; simply sending a malicious request over the network is sufficient to trigger the vulnerability
- High confidentiality and integrity impact: CVSS scores indicate high impact on confidentiality, integrity, and availability, meaning an attacker can steal sensitive data, tamper with system state, and cause service disruption
Source
Remediation- Immediately update the component to the officially released patched versionte the component to the officially released patched version
- Apply strict filtering and monitoring of SetParameter command requests at the firewall or WAF level
- Enforce strict whitelist validation and special-character escaping on all input data
Package Poisoningnpm2026-07-17
agentto@0.5.36 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
08011aa6b7f86bb8d5968017e69ba3fc
Package Poisoningnpm2026-07-17
channel-worker@2.5.39 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
287e020b33ecef4ea61c8c11d5f96fa2
Package Poisoningnpm2026-07-17
codeam-cli@2.61.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
c2d417f5b21993e689c4ee7f70fdc61f
Package Poisoningnpm2026-07-17
isite@2026.7.2 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
045515e313d28302f4177d865ad089c0
Package Poisoningnpm2026-07-17
netcontrol-agent@1.0.5 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
ad2ec3ee89dc4809c90e0a88df970bb2
Package Poisoningnpm2026-07-17
patchwork-os@1.1.0-beta.3.canary.414 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
f14edeae46b6994bdbd4330119765c52
Package Poisoningnpm2026-07-17
phantomx-tool-client@1.0.8 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
a1e857a3ae67383242674482e809c15b
Package Poisoningpypi2026-07-17
airflow-provider-spirit@0.0.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
f30a8a03278a36f099ab4f3df297b91c
Package Poisoningpypi2026-07-18
darkglitch@1.2.0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
fa94b3faf1d48c41e07aada064153bc7
Package Poisoningpypi2026-07-17
dde-common@0.0.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
15c39fb5942de814f4ee0b3df71f769e
Package Poisoningpypi2026-07-18
trongridme@0.0.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
8b51a89c45e815662701fb76fa012f91
