CSSA Exclusive Early Warning10.0 Critical
TencentDB-Agent-Memory SSRF validation bypass leading to internal network resource disclosure and loss of system integrity
An attacker exploits the mismatch between hostname extraction logic and the regular expression check in git-fetcher.ts by crafting bracketed IPv6 addresses or IPv4-mapped IPv6 addresses such as [::1] or [::ffff:169.254.169.254]. Because PRIVATE_ADDR_RE neither strips the brackets nor decodes the mapped format, loopback, link-local and private addresses successfully bypass the SSRF denylist. The attacker can then issue remote requests against cloud metadata endpoints or internal services, causing sensitive configuration disclosure and creating the risk of internal network penetration.
Component
TencentDB-Agent-Memory is an intelligent agent component in the Tencent Cloud database ecosystem. Its core architecture integrates a knowledge graph a…
Type
SSRF (CWE-918)
Repo
Remediation- It is recommended to strip leading and trailing brackets from the URL hostname and normalize it into standard IPv4 or IPv6 form, while extending the regular expression to cover every category of IPv6 private address range and IPv4-mapped variant — completing thorough protocol normalization and address type determination before internal access control, thereby closing off this class of boundary bypass.
CSSA Exclusive Early Warning9.6 Critical
node-http-proxy header transformation defect on DELETE and OPTIONS requests leading to HTTP request smuggling, unauthorized access and data disclosure
An attacker triggers the vulnerability by crafting a DELETE or OPTIONS request that carries a Transfer-Encoding: chunked header but no Content-Length header. Because the deleteLength function does not check for the presence of chunked encoding before forcibly setting Content-Length to 0 and removing the Transfer-Encoding header, the backend server terminates reading early based on the incorrect length and misinterprets the remaining payload as a new request. This CL.TE smuggling mechanism allows an attacker to inject arbitrary HTTP methods that bypass proxy routing restrictions, reaching internal sensitive endpoints directly, hijacking session context or poisoning shared caches, seriously undermining system isolation and data integrity.
Component
node-http-proxy is a lightweight HTTP proxy library widely used in the Node.js ecosystem, with a core architecture built on stream pipelines for reque…
Type
HTTP Request/Response Smuggling (CWE-444)
Repo
Remediation- It is recommended to fix the code so that length is set to 0 only when both Content-Length and Transfer-Encoding headers are absent, and to strictly prohibit modifying the message framing of requests carrying chunked encoding. Original transfer semantics should be preserved to avoid front-end and backend parsing divergence, and developers should follow the HTTP specification strictly when determining request boundaries to prevent this class of desync attack.
CVE-2026-74014CVSS 9.9 Critical2026-08-20
IT Residence Arbitrary File Upload Leading to Remote Code Execution
In IT Residence 3.2.1 and earlier, the subscriber functionality module has insufficient file upload validation, resulting in unrestricted upload of dangerous file types (CWE-434). An attacker can craft a malicious file upload request to bypass security restrictions and upload executable scripts or web shells, threatening server integrity and availability. IT Residence contains an arbitrary file upload vulnerability in subscriber file handling that an attacker can trigger remotely over the network, leading to complete server compromise or data disclosure. It affects all IT Residence users who have not updated beyond 3.2.1, including every site environment where the plugin is deployed. An attacker needs only a low-privilege account to launch the attack, with no complex interaction and remote control possible.
Component
IT Residence is an open-source plugin/component for website management supporting subscriber management and file interaction.
Risks
- From low-privilege user to complete control: An attacker with a subscriber account can use this vulnerability to escalate to server administrator level
- Complete system control: An attacker can execute arbitrary code on the server, and depending on server privileges, install programs, view/modify/delete data or create new accounts with full privileges
- Remote network attack: Through a crafted malicious HTTP request (T1190), an attacker can trigger the vulnerability without physical access, exploiting a network vector
Source
Remediation- Strictly limit uploadable file types and extensions to an allowlist of safe formats
- Configure the upload directory to prohibit script execution (for example by removing execute permissions)
- Deploy a web application firewall (WAF) to intercept anomalous upload request behavior
CVE-2026-62674CVSS 9.0 Critical2026-08-22
Omnigent Shared Agent Session Permission Bypass Leading to Remote Code Execution
In Omnigent prior to version 0.3.0, the PUT /sessions/{session_id}/agent endpoint contains a logic flaw: although it checks the session's LEVEL_EDIT permission, it does not reject bound shared or template agents whose agent.session_id is None. An authenticated user with session edit permission can replace that shared agent package through omnigent/server/routes/sessions.py, add a stdio MCP server, and cause subsequent sessions using the shared agent to launch attacker-controlled commands through omnigent/tools/mcp.py. The command executes with the privileges of the Omnigent runner process, potentially exposing files, credentials, workspace data, internal services and the availability of the runner. The issue was fixed in version 0.3.0.
Component
Omnigent is an open-source AI agent framework and meta-framework used to orchestrate coding agents.
Risks
- Privilege escalation and lateral movement: By exploiting the shared agent design, an attacker injects malicious code into multiple sessions, penetrating from a single session into the global environment
- Sensitive data disclosure: Because commands execute with runner process privileges, an attacker can reach the filesystem, credentials, workspace data and internal service interfaces
- Remote code execution: By crafting a malicious stdio MCP server, an attacker can execute arbitrary system commands in the victim environment and fully control the runner process
Source
Remediation- Immediately upgrade Omnigent to version 0.3.0 or later to fix the vulnerability
- Review and restrict access to the /sessions/{session_id}/agent endpoint so only trusted sources can modify shared agents
- Monitor Omnigent runner processes for anomalous command execution, particularly stdio MCP server launch records
CVE-2026-62940CVSS 9.9 Critical2026-08-21
Incus Instance Migration Config Override Privilege Escalation Leading to Container Escape
In Incus prior to version 7.3.0, the system container and virtual machine management module lacks an authorization mechanism (CWE-862), resulting in a configuration override privilege escalation flaw. When migrating an instance to another cluster member, user-supplied configuration overrides — including security-critical keys such as security.privileged and raw.lxc — are applied without enforcing any project restrictions, allowing restricted project users to escalate to a privileged container and escape to the host. Incus contains a permission bypass in instance migration scenarios that an attacker can trigger with a crafted migration configuration, leading to container escape and complete host compromise. It affects all Incus users who have not updated to 7.3.0, including cluster deployments. An attacker needs only restricted project user permissions to trigger it; exploitation is easy and can be performed remotely.
Component
Incus is a system container and virtual machine manager used to manage the lifecycle of containers and virtual machines and cluster operations.
Risks
- From restricted user to host root: Successful exploitation lets an attacker escalate from a restricted container user to a privileged container, then escape to the host and gain full control of the host system
- Complete system control: An attacker can execute arbitrary code on the host, and depending on host privileges, install programs, view/modify/delete data or create new accounts with full privileges
- Low-privilege exploitation: An attacker needs only low privileges (restricted project user) to trigger the vulnerability, with no additional user interaction required during cluster migration
Source
Remediation- Immediately upgrade Incus to version 7.3.0 or later to fix the vulnerability
- Review instance migration configuration policy across the cluster and restrict override permissions for sensitive configuration keys
- Monitor container migration logs to detect anomalous configuration overrides and privilege escalation attempts
Package Poisoningnpm2026-08-21
cig-data-patcher@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
5eedc571cde211bb2175a56afce728e6
Package Poisoningnpm2026-08-21
create-react-app-text@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
6956d2b9cfff978d5c772f3492d72c75
Package Poisoningnpm2026-08-21
create-react-app-ui@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
5e997e3fe9733a790756a2ba35d6353d
Package Poisoningnpm2026-08-21
create-react-app-ux@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
5d95381cf07143ee6398c56c0d096233
Package Poisoningnpm2026-08-21
ethereum-validator@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
2621a4097c64b80e4ac116514609e4f7
Package Poisoningnpm2026-08-21
goldstar-api-server@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
cb588940bb863de67c0f370367477ccf
Package Poisoningnpm2026-08-21
@pablo_clueless/printr@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
5d4ac904aa416f6f58191c1794e151a3
Package Poisoningnpm2026-08-21
@pablo_clueless/sniffr@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
2a40044d00b9afc086008d6cb94d233d
Package Poisoningnpm2026-08-21
exam-kit@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
2c782b0562158c100b434a9c867206cd
Package Poisoningnpm2026-08-21
@next-fonts/font@1.0.0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
274e18a3ba7a1eaeeb84443eb095561c
Package Poisoningnpm2026-08-22
kelly-sizing@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
813bad3b1a823b1617b88af89793f87d
Package Poisoningnpm2026-08-22
lumen-pages-community@9.9.9 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
c156900a09ef879ae2ac686b41b24102
Package Poisoningnpm2026-08-23
internallib_v902@>= 0 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
379eabfd65fd4defb322cbbab0bf4197
Package Poisoningnpm2026-08-23
stillm4ddpocs-demo-gadget@999.9.10 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
d4292b2aacf9d120d3937b65575942dc
Package Poisoningnpm2026-08-23
@syncraft-labs/core@0.4.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
ed5298f4d7ada01979f78dd4a3f414d1
Package Poisoningnpm2026-08-23
@syncraft-labs/react@0.4.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
18f96e66b323b6b598f6e3ef7cd21a15
Package Poisoningnpm2026-08-23
@syncraft-labs/vue@0.4.1 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
47e70f2ca8803e60e280f77257d6e0cb
Package Poisoningnpm2026-08-23
stillm4ddpocs-demo-sprocket@999.9.12 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
0f50213a9575c50f98d860a367ec297d
Package Poisoningnpm2026-08-23
stillm4ddpocs-rtest-bravo@999.9.10 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
4ec16f9241a20f69090aa2680bc2e4be
Package Poisoningnpm2026-08-23
totp-utils@1.4.9 flagged as malicious
This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.
MD5
bfb0c8f207e3b63b596f254238dc7362
