NEWSkillSec — elevating AI Skills security from malware detection to capability auditingSkillSecLearn more →
← Back to Intel Center
SECURITY INTEL · DAILY
Link copiedRSS

2026-07-22 Daily Security Intelligence

4 itemsTop severity 10.0 (Critical)CSSA 2 · CVE 2 · Poisoning 0

CSSA Exclusive Early Warning2

CSSA Exclusive Early Warning10.0 Critical

DB-GPT voice component command injection triggered by malicious input leading to loss of host control

This flaw originates from the underlying speech synthesis interface, which concatenates externally supplied text streams directly into a dynamic string template and hands it to the operating system command-line parser when invoking system-level speech processes. Because escaping of critical control characters and security boundary isolation are missing, an attacker can deliver malformed parameters carrying closing symbols and command separators over standard network protocols, exploiting the zero-trust validation gap to activate the underlying shell environment directly. Arbitrary code can therefore be planted without holding a valid session identifier, exposing infected instances to unauthorized data access and hijacking of compute units.

Component
DB-GPT is an intelligent data assistant platform that integrates large language model capabilities with database interaction. Its architecture uses a…
Type
OS Command Injection (CWE-78)
Repo
github.com/eosphoros-ai/DB-GPT · Stars 19537
Remediation
  • It is recommended that engineering teams fully disable implicit interpreter invocation in modules handling external data flows, migrate uniformly to process creation APIs based on discrete argument lists, deploy strict content type validation and denylist filtering, and build an isolated execution domain for commands using runtime sandbox technology.
CSSA Exclusive Early Warning10.0 Critical

claurst missing authorization allows attackers to execute code remotely and compromise the system

This vulnerability stems from the absence of a unified authorization interception gateway in the tool registration module, and the lack of fine-grained access control policies across individual execution units. An attacker can craft a structured data payload containing the target interpreter type and custom instructions and submit it directly to the runtime engine over the network interface. The system then passes the input parameters straight through to the host environment for process spawning, skipping identity verification and risk grading entirely. This flaw is low-complexity to exploit and triggers remote code execution without prior authentication, breaking out of the sandbox boundary and causing sensitive data disclosure, configuration tampering and disruption of core services.

Component
claurst is a multi-language runtime scheduling framework for automated workflow orchestration. Its architecture uses a modular plugin design, with cor…
Type
Missing Authorization (CWE-862)
Repo
github.com/Kuberwastaken/claurst · Stars 10119
Remediation
  • It is recommended to enforce an authorization middleware before executing any external process and to apply strict access control policies. Dynamic payloads should undergo syntax filtering and dangerous-pattern matching to block illegal instruction execution, and runtime state should be thoroughly cleared at session end to prevent privilege escalation.

CVE Intelligence2

CVE-2026-64608CVSS 9.8 Critical2026-07-21

Apache Fory C++ Deserialization Heap Type Confusion and Out-of-Bounds Access Leading to Remote Code Execution

In Apache Fory C++ prior to version 1.4.0, the deserialization module in compatible mode fails to properly verify the consistency between declared field types and actual data along the field-skipping path, resulting in heap type confusion and out-of-bounds read/write (CWE-502). Input with an inconsistent schema can cause type confusion and out-of-bounds memory access, threatening process stability and security. Apache Fory C++ contains a memory corruption vulnerability when deserializing certain data, which an attacker can trigger with crafted serialized data, leading to remote code execution or service disruption. The vulnerability affects only the Apache Fory C++ implementation (versions 0.14.0 up to but not including 1.4.0); other language implementations are unaffected. An attacker only needs to send crafted serialized data to exploit it, over a network attack vector with low complexity.

Component
Apache Fory is a high-performance serialization framework whose C++ implementation is widely used in scenarios requiring efficient data serialization and deserialization.
Risks
  • From standard user to administrator: If the victim runs a service using Apache Fory C++ with administrative privileges, the attacker gains the same privileges
  • Complete system control: An attacker can execute arbitrary code on the victim system, and depending on user privileges, install programs, view/modify/delete data or create new accounts with full privileges
  • No user interaction required: Sending malicious serialized data over the network is sufficient to trigger the vulnerability
Source
NVD · CVE-2026-64608
Remediation
  • Immediately upgrade Apache Fory C++ to version 1.4.0 or later
  • Enforce strict schema validation on deserialization input
  • Restrict the sources of deserialized data and trust only data from verified origins
CVE-2026-16412CVSS 9.8 Critical2026-07-21

Firefox Memory Safety Vulnerabilities Leading to Remote Code Execution

Memory safety vulnerabilities exist in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and, with enough effort, some of them could presumably be exploited to run arbitrary code. The issue has been fixed in Firefox 153 and Firefox ESR 140.13. Firefox contains memory corruption vulnerabilities in certain scenarios that an attacker can trigger with a crafted page, leading to remote code execution or service disruption. The vulnerability affects all Firefox users who have not updated to Firefox 153 or Firefox ESR 140.13, including desktop and mobile deployments. An attacker only needs to lure the target into visiting a crafted web page to exploit it, requiring no further user interaction and allowing remote control.

Component
Firefox is a cross-platform open-source web browser supporting complex graphics rendering and web technology interaction.
Risks
  • From standard user to administrator: If the victim runs the browser with administrative privileges, the attacker gains the same privileges
  • Complete system control: An attacker can execute arbitrary code on the victim system, and depending on user privileges, install programs, view/modify/delete data or create new accounts with full privileges
  • No user interaction required: Through drive-by compromise (T1189), a user only needs to visit a malicious page to trigger the vulnerability, with no additional interaction
Source
NVD · CVE-2026-16412
Remediation
  • Immediately upgrade to Firefox 153 or Firefox ESR 140.13 or later
  • Enable sandbox isolation for the runtime environment
  • Block script loading from untrusted sources
  • ---
← Back to Intel CenterRSSMonitor these risks automatically with CleanSource SCA →