CSSA Exclusive Early Warning10.0 Critical
HummingBot framework malicious data injection enabling remote code execution and privilege takeover
This flaw stems from the absence of strict input validation in external data parsing logic. Specifically, the Foxbit connector calls eval directly to evaluate raw string fields when parsing WebSocket message frames, while the remote API order book data source uses the pickle module for binary deserialization of HTTP response bodies without integrity signature verification. An attacker who controls the communication path through man-in-the-middle hijacking or DNS spoofing can deliver a crafted malicious JSON payload or a serialized factory object containing the __reduce__ protocol to the target node, triggering operating system command invocation during deserialization or expression evaluation. The affected process is fully exposed to an untrusted execution environment, leading to leakage of trading keys and wallet credentials and exposing deployed nodes to full lateral movement risk and persistent control.
Component
HummingBot is an open-source high-frequency quantitative trading framework built on an asynchronous event-driven model, with core modules covering exc…
Type
Code Injection (CWE-94)
Repo
Remediation- It is recommended to abandon dynamic expression evaluation and unsafe deserialization components entirely in favor of secure decoding with structured data formats. Enforce strict type validation and allowlist filtering on external input, and require certificate pinning and message integrity verification on communication channels to build a reliable data processing defense.
CSSA Exclusive Early Warning10.0 Critical
adk-python privilege-exceeding confirmation request attack leading to remote command execution
This flaw stems from the absence of strict identity source verification in the confirmation mechanism for critical function calls. The system releases sensitive operation instructions based solely on matching the event author identifier against the user role. An attacker can inject a forged confirmation response packet into the target node through the cross-agent communication protocol, exploiting trust boundary confusion in role mapping during message conversion to obtain privilege-exceeding approval. Combined with runtime interfaces that have no network authentication enabled by default, a remote entity can directly trigger dangerous tool execution flows, exposing the affected host to unauthorized command execution and undermining the integrity and availability of the system runtime environment.
Component
adk-python is Google's Python-based AI agent development kit. Its core architecture is built around large language model workflow orchestration and mu…
Type
Missing Authentication for Critical Function (CWE-306)
Repo
Remediation- It is recommended to deploy strict network access control policies and mutual authentication, introduce context provenance auditing for critical interfaces, restructure trust verification logic around least privilege during development, ensure high-risk invocations pass through a human intervention review channel, and decouple external protocols from local execution environment paths.
CVE-2026-55971CVSS 9.8 Critical2026-07-27
Apache Thrift C++ Binding Heap Buffer Overflow Leading to Remote Code Execution
In Apache Thrift prior to version 0.24.0, insufficient boundary validation in the C++ binding module results in a heap buffer overflow (CWE-122) security flaw. Processing certain network requests can cause heap memory to be overwritten, threatening process stability and security. The Apache Thrift C++ binding contains a memory corruption vulnerability in specific data handling scenarios that an attacker can trigger with crafted network packets, leading to remote code execution or service disruption. The vulnerability affects all Apache Thrift users who have not updated to 0.24.0, including both server-side and client-side deployments. An attacker only needs to send a crafted request to the target service to exploit it, requiring no user interaction and allowing remote control.
Component
Apache Thrift is a cross-language service framework for building scalable cross-language services, supporting bindings for multiple programming languages.
Risks
- From standard user to administrator: If the victim runs the Thrift service with administrative privileges, the attacker gains the same privileges
- Complete system control: An attacker can execute arbitrary code on the victim system, and depending on user privileges, install programs, view/modify/delete data or create new accounts with full privileges
- No user interaction required: Through a network attack vector, an attacker can trigger the vulnerability remotely without user interaction
Source
Remediation- Immediately upgrade Apache Thrift to version 0.24.0 or later
- Monitor logs for anomalous memory access behavior
- Enable sandbox isolation for the runtime environment
CVE-2026-51303CVSS 9.8 Critical2026-07-28
SQLite Core Parsing Component Use-After-Free Leading to Remote Code Execution
In SQLite 3.41, a memory management defect in the core parsing component results in a use-after-free (CWE-416) vulnerability. After the program frees an ExprList object via sqlite3ExprListDelete, it still accesses a dangling pointer to that freed object. A remote attacker can supply a carefully crafted SQL query to trigger the vulnerability during SQL statement parsing. Successful exploitation may cause application crashes (denial of service), disclosure of sensitive memory information, and in some scenarios arbitrary code execution on the affected host. The vulnerability affects all applications using SQLite 3.41 without the patch applied. An attacker only needs to send a crafted SQL request to trigger it, requiring no user interaction and allowing remote control.
Component
SQLite is a lightweight, self-contained, serverless, zero-configuration, transactional SQL database engine widely used in embedded systems and applications of all kinds.
Risks
- From standard user to administrator: If the affected application runs with elevated privileges, the attacker gains the same privileges
- Complete system control: An attacker can execute arbitrary code on the victim system, and depending on user privileges, install programs, view/modify/delete data or create new accounts with full privileges
- No user interaction required: By crafting a malicious SQL query, an attacker can trigger the vulnerability remotely with no additional user interaction
Source
Remediation- Enforce strict syntactic and logical validation on incoming SQL queries
- Enable application sandboxing or privilege minimization policies to limit potential impact
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
d3843c072aaa916e8ad82557c93d3d83
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
93a4478509bb3163fad0ea19e10cb2ce
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
a8f5f5c7f58ad91a5c352ef70be880bb
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
27c887e24f0206da1fcddd753979fee2
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
d4cf84143e12d3696934b91c61abe799
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
8fb6427d727eea68079c367c81527ef0
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
dedb09c183eefe4c1b65d1c155d4b241
Package Poisoning2026-07-28
@ flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
ca626607343d77d6371f4fcc116db70e
Package Poisoningnpm2026-07-28
date-sanitize-helper@1.0.0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
bebd1ef5748168fb4a0c710ea3d6d7d1
Package Poisoningnpm2026-07-28
num-format-helper@1.0.0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
23b6844dfa6bb390d1c36f14f2f104b5
