AI and data stack advisories

Critical this month46Projects282

46 critical this month · 282 projects

All advisories

Critical advisories

46 advisories

AWSCVE-2026-85228Oct 25Integer overflow in tensor buffer validation in Deep Java LibraryCritical9.1No fix yetAWSCVE-2026-89049Oct 25Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentCritical9.9No fix yetAWSCVE-2026-87911Oct 25AWS security bulletinCritical9.6No fix yetAWSCVE-2026-115812Oct 23Issue in Amazon Web Services Multi Model ServerCritical9.8No fix yetmem0CVE-2026-115324Oct 22mem0ai Databricks vector store vulnerable to SQL injectionCritical8.1Fixed in 1.0.8OktaCVE-2026-115547Oct 22Command Execution via Admin Console Input in Okta Access GatewayCommand Execution via Admin Console Input in Okta Access Gateway CVE-2026-115547 - Oct 22, 2026Critical9.1No fix yetOktaCVE-2026-109618Oct 22PHP Runtime Vulnerabilities Affecting Okta Access GatewayPHP Runtime Vulnerabilities Affecting Okta Access Gateway CVE-2026-109618 / CVE-2026-109619 - Oct 22, 2026Critical9.8No fix yetAWSCVE-2026-109618Oct 21PHP web runtimesPHP web runtimes (CVE-2026-109618 and CVE-2026-109619)Critical9.8No fix yetAWSCVE-2026-112380Oct 20Missing authorization in the WhatsApp channel in Kiro CrewCritical9.9No fix yetAWSCVE-2026-50195Oct 19Issue with containerd CRI PluginCritical9.9No fix yetAWSCVE-2026-13762Oct 19Issue with HTTP/2 multi-frame request body inspection in AWS WAFCritical9.8No fix yetAWSCVE-2026-8838Oct 19Remote Code Execution in amazon-redshift-python-driverCritical9.8No fix yetLMCacheCVE-2026-105192Oct 16LMCache: Remote code execution via unsafe deserialization in multiprocess mode transportCritical9.8Fixed in 0.5.6vitessCVE-2026-104252Oct 15Vitess vttablet /twopcz reflected XSSCritical9.8Fixed in 0.23.5 +1AWSCVE-2026-99999Oct 15Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisorsCritical9.3No fix yetAWSCVE-2026-110812Oct 15Deserialization of untrusted data in the Gremlin graph-import path in Amazon NeptuneCritical9.9No fix yetGitHubGHSA-9jxf-w4wc-5g93Oct 14Sandboxed code can steal and silently exfiltrate the gh-aw job tokenCritical9.2Fixed in v0.91.13GitHubGHSA-f7r8-5pqp-q5p4Oct 14GHSL-2026-180: Argv flag injection from MCP client into spawned `gh aw` subcommandsCritical9.2Fixed in v0.91.12GitHubGHSA-x5hq-gjxf-pgxmOct 14GHSL-2026-184: Ungated MCP `mcp-inspect` executes attacker-declared stdio command (chained with ungated `add`)Critical9.3Fixed in v0.91.12GitHubGHSA-62c8-mmw9-rq5wOct 14GHSL-2026-188, GHSL-2026-189: Flag injection in MCP tool handlers via unseparated positional argumentsCritical9.2Fixed in v0.91.12LangflowCVE-2026-105697Oct 7Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationCritical9.9Fixed in 1.10.3FlowiseCVE-2026-73487Oct 7Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator BypassCriticalFixed in 3.1.3FlowiseCVE-2026-73483Oct 7Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via ChromiumCriticalFixed in 3.1.3LangflowCVE-2026-10561Oct 6Langflow: remote code executionLangflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalationCritical9.9Fixed in 1.10.1AWSCVE-2026-105812Oct 6Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRFCritical9.0No fix yetLangflowCVE-2026-9205Oct 5Langflow: Weak Fernet Key via random.seed()Critical9.1Fixed in 1.10.1LangflowCVE-2026-8505Oct 5Langflow: Unauthenticated Flow Execution via Webhook Authentication BypassCritical9.8Fixed in 1.9.1ChromeCVE-2026-103630Oct 2Google Chrome: use after freeUse after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)Critical9.6Fixed in 154.0.8037.97ChromeCVE-2026-103626Oct 2Google Chrome: improper authorizationIncorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.Critical9.6Fixed in 154.0.8037.97ChromeCVE-2026-103628Oct 2Google Chrome: out-of-bounds writeOut of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.Critical9.6Fixed in 154.0.8037.97GitLab AI GatewayCVE-2026-90970Oct 2GitLab AI Gateway: template injectionGitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.Critical9.9Fixed in 19.2.4 +2Apache ThriftCVE-2026-83632Oct 2Apache Thrift: integer overflowAllocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0.Critical9.2Fixed in 0.25.0AWSCVE-2026-104019Oct 2OS command injection in the Studio Space startup script in Amazon SageMaker DistributionCritical9.0No fix yetAWSCVE-2026-103956Oct 2Issues in Loom for AWSCritical10.0No fix yetApache ThriftCVE-2026-91135Oct 2Apache Thrift: heap buffer overflowHeap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport.Critical9.2Fixed in 0.25.0Apache Directory LDAP APICVE-2026-103877Oct 2Apache Directory LDAP API: unsafe deserializationDeserialization of Untrusted Data vulnerability in Apache Directory LDAP API.Critical9.8Fixed in 2.1.9389-ds-baseCVE-2026-86345Oct 2A flaw was found in 389-ds-baseA flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP...Critical9.0No fix yetSConnectCVE-2026-18397Oct 1Thales Group SConnect: remote code executionThis vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect...Critical9.4Fixed in 2.16.1.0FortiMailCVE-2026-104286Oct 1Fortinet FortiMail: path traversalAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.Critical9.8No fix yetForeman. This vulnerabilityCVE-2026-96659Oct 1Red Hat Foreman. This vulnerability: information disclosureA flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview...Critical9.1No fix yetForemanCVE-2026-96658Oct 1Red Hat Foreman: remote code executionA flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine.Critical9.9No fix yetApache HTTP ServerCVE-2026-59797Oct 1Apache HTTP Server: improper privilege managementImproper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.Critical9.8No fix yetApache HTTP ServerCVE-2026-57941Oct 1Apache HTTP Server: use after freeUse After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.Critical9.8No fix yetApache HTTP ServerCVE-2026-56154Oct 1Apache HTTP Server: use after freeUse After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.Critical9.8No fix yetEndpoint SecurityCVE-2026-13043Oct 1WatchGuard Technologies Endpoint Security: missing authenticationA missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's...Critical9.3Fixed in 8.00.26.0012RouterCVE-2026-14157Oct 1ASUS Router: remote code executionUse of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management...Critical9.4No fix yet