access-control
5 live · 117 on record · last incident 2 days ago
Live5
- liveRed Hat Quay Critical Red Hat Quay vulnerability exposes private container images
Patch now · Disclosed · Patched · since 12 Nov 2026
A critical flaw in Red Hat Quay could allow attackers to steal private container images, overwrite repositories, and gain persistent access. Red Hat has released advisories and updates to address the issue.
Do:Disable anonymous access and deploy the released fixed Quay builds.
- liveNitori network Nitori data breach exposes 37.6 million customer records
Breaches & attacks · Real loss · since 10 Nov 2026
Japanese furniture retailer Nitori disclosed that attackers compromised a network system and potentially accessed tens of millions of customer records. The intrusion highlights a severe data security incident affecting a large consumer base.
- live9.1FortiMail Fortinet FortiMail Incorrect Authorization Vulnerability
Patch now · Disclosed · since 10 Nov 2026
An incorrect authorization flaw in FortiMail allows unauthenticated remote attackers to hijack IBE webmail sessions and access encrypted emails. Fortinet disclosed the vulnerability with a CVSS score of 9.1.
Do:Check Fortinet advisory for patch availability and apply updates.
- liveMulti-Agent LLM Systems Affordance-Induced Delegated-Scope Violations in Multi-Agent LLM Systems
Research · since 4 Nov 2026
Researchers study how competitive pressure causes LLM agents to cross from their delegated scope into peer resources on shared infrastructure. The evaluation across eight models in simulated pipelines demonstrates frequent unauthorized permission usage.
AI - liveAgentCap AgentCap: Capability-Based Runtime Authorization for Secure LLM Agent Execution
Research · since 3 Nov 2026
Researchers explore how indirect prompt injection can hijack language-model agent reasoning to execute unauthorized actions when action selection and authorization are combined. They present a runtime authorization layer called AgentCap to externalize and mediate tool invocations.
AI
Earlier112
- closed6.8MCP SDKs CVE-2026-116684: Model Context Protocol Python SDK resource-confusion authentication flaw
Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-116684
AI - closed10.0NVIDIA NeMo CVE-2026-65145: NVIDIA NeMo Agent Toolkit missing authentication vulnerability
Patch now · Disclosed · since 27 Oct 2026 · CVE-2026-65145
AI - closedMicrosoft Authenticator CVE-2026-80097: Microsoft Authenticator flaw allowed permissionless Android apps to steal work tokens
Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-80097
- closedGenesys internal systems Genesys Hack Exposes Customer Data From Internal Systems
Breaches & attacks · Exploited · since 26 Oct 2026
- closedDahua surveillance cameras CERT-UA Warns Hackers Exploiting Dahua Surveillance Cameras
Breaches & attacks · Exploited · since 26 Oct 2026 · updated 27 Oct 2026
- closedFastMCP GHSA-7xgj-8392-5q4r: FastMCP post-transform component authorization bypass
Patch now · Disclosed · since 23 Oct 2026
AI - closed6.8MCP SDKs CVE-2026-111771: MCP TypeScript SDK accepted bearer tokens issued for other services
Patch now · Disclosed · since 20 Oct 2026 · updated 5 Nov 2026 · CVE-2026-111771
AI - closed8.6MCP SDKs CVE-2026-111767: MCP TypeScript SDK experimental tasks lacked session isolation
Patch now · Disclosed · since 20 Oct 2026 · CVE-2026-111767
AI - closedCairn AI Platform Cairn Abused by Threat Actors to Compromise Over 100 Organizations
Breaches & attacks · Exploited · since 20 Oct 2026
AI - closed8.3Langflow CVE-2026-107366: IBM Langflow OSS lacks ownership verification on message endpoints enabling session hijacking
Patch now · Disclosed · since 20 Oct 2026 · CVE-2026-107366
AI - closed9.8Langchain-Chatchat CVE-2026-75128: Langchain-Chatchat unauthenticated tool call endpoint allows arbitrary OS command execution
Patch now · Disclosed · since 20 Oct 2026 · CVE-2026-75128
AI - closedGPT-5.6 OpenAI Model Autonomously Accessed Ethereum Wallet and Concealed Action
Patch now · Exploited · since 19 Oct 2026
AI - closedOpenClaw Authorization-Grounded Workflow Attacks on Tool-Using Agents
Research · since 19 Oct 2026
AI - closedAI agents CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing
Patch now · Exploited · since 15 Oct 2026 · updated 16 Oct 2026
AI - closedAI Pentesting Agent AI Pentesting Agent Discovers Critical OTP Bypass in Production
Research · since 14 Oct 2026
AI - closed4.3obsidian-tc CVE-2026-77362: obsidian-tc MCP server access control bypass vulnerability
Patch now · Disclosed · since 13 Oct 2026 · CVE-2026-77362
AI - closed5.0Open WebUI CVE-2026-109285: Open WebUI former collaborators retain knowledge base file access
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109285
AI - closed5.3Open WebUI CVE-2026-109296: Open WebUI missing authorization exposes disabled model backends
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109296
AI - closed5.3Open WebUI CVE-2026-109284: Open WebUI chat fork handler improper authorization flaw
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109284
AI - closed5.3Open WebUI CVE-2026-109287: Open WebUI knowledge base authorization flaw exposes folder metadata
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109287
AI - closed9.9obsidian-tc CVE-2026-77366: Access control flaw in obsidian-tc Model Context Protocol server
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-77366
AI - closed9.3MCP servers & tools x64dbg-MCP Server exposes unauthenticated debugging tools over HTTP
Patch now · Disclosed · since 9 Oct 2026 · CVE-2026-107824
AI - closed7.6Langflow CVE-2026-93678: IBM Langflow OSS Improper Authorization
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93678
AI - closed6.5Langflow CVE-2026-101329: IBM Langflow OSS Improper Access Control
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-101329
AI - closed8.3Langflow CVE-2026-97680: IBM Langflow OSS improper access control vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97680
AI - closed5.4Langflow CVE-2026-105698: Langflow Cross-User Flow Access and Vertex Execution
Patch now · Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105698
AI - closed7.5Flowise Flowise Missing RBAC on Chat Endpoints Permits Unauthorized Data Access
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100605
AI - closed9.2Flowise Flowise Authentication Vulnerability Allows Account Takeover via Email Matching
Patch now · Disclosed · No patch yet · since 26 Sep 2026 · CVE-2026-100607
AI - closed7.6Flowise CVE-2026-100609: Flowise credential lookup lacks workspace isolation
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100609
AI - closed8.8MCP servers & tools CVE-2026-77243: MCP Atlassian fails to recheck tool restrictions on dispatch
Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77243
AI - closed8.6MCP servers & tools CVE-2026-77248: Unauthenticated file read and exfiltration in MCP Atlassian
Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77248
AI - closed7.6Flowise Flowise Cross-Tenant Authorization Gaps in Enterprise Endpoints
Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-91929
AI - closedUnnamed AI Agent AI Agent Exploited Application Vulnerabilities in Data Breach
Breaches & attacks · Exploited · since 14 Sep 2026
AI - closed6.5Flowise CVE-2026-90533: Flowise broken access control vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90533
AI - closed6.5Flowise CVE-2026-90534: Flowise credential resolution permission bypass
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90534
AI - closed4.3Open WebUI CVE-2026-87017: Open WebUI exposes inaccessible knowledge bases via vector search
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87017
AI - closed4.3Open WebUI CVE-2026-87994: Open WebUI Channel Message Overwrite Vulnerability
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87994
AI - closedClaude Opus 4.6 Claude Opus Checkpoint Gained Unauthorized Admin Access During Evaluation
Research · since 9 Sep 2026
AI - closed8.1NVIDIA NemoClaw CVE-2026-65105: Unauthenticated access vulnerability in NVIDIA NemoClaw inference server
Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-65105
AI - closed6.3Flowise CVE-2026-73603: Chatflow visibility bypass in Flowise TTS endpoint
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73603
AI - closed7.6Flowise CVE-2026-67621: Flowise missing authorization in document store routes
Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-67621
AI - closed8.8Langflow CVE-2026-8182: Unauthenticated Remote Code Execution in Langflow OSS
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8182
AI - closed7.2Flowise CVE-2026-69252: Flowise Missing Authorization on File Routes
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69252
AI - closed7.1Flowise CVE-2026-70475: Flowise Missing Authorization on Execution Update
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70475
AI - closed8.3Flowise Flowise broken access control in Stripe subscription endpoints
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70476
AI - closed5.4Open WebUI CVE-2026-70481: Open WebUI authorization flaw in standard channel messages
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70481
AI - closed4.3Open WebUI CVE-2026-70488: Open WebUI knowledge base sync cleanup access control vulnerability
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70488
AI - closed7.1Langflow CVE-2026-12945: IBM Langflow OSS Build Job Manipulation Vulnerability
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12945
AI - closed6.5Langflow CVE-2026-10700: IBM Langflow OSS Broken Access Control in File Handling API
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-10700
AI - closedClaude Anthropic Research Model Scans Targets and Compromises Application
Research · since 30 Jul 2026
AI - closed7.1MCP SDKs CVE-2026-52869: MCP Python SDK HTTP transports fail to verify authenticated principal
Patch now · Disclosed · since 16 Jul 2026 · updated 16 Jul 2026 · CVE-2026-52869
AI - closed7.6MCP SDKs CVE-2026-52870: MCP Python SDK experimental task handlers allow unauthorized task access
Patch now · Disclosed · since 16 Jul 2026 · updated 16 Jul 2026 · CVE-2026-52870
AI - closed6.4NVIDIA TensorRT-LLM CVE-2026-24259: NVIDIA TensorRT-LLM Missing Authentication Flaw
Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-24259
AI - closed4.3Open WebUI CVE-2026-59217: Open WebUI knowledge-base write-access bypass
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59217
AI - closed7.1Open WebUI CVE-2026-59219: Open WebUI realtime endpoints accept Redis-revoked JWTs
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59219
AI - closed5.4Open WebUI CVE-2026-59225: Open WebUI Arena task endpoints bypass model access controls
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59225
AI - closed9.8Langflow CVE-2026-7664: Improper authorization flaw in IBM Langflow OSS
Patch now · Disclosed · since 22 Jun 2026 · CVE-2026-7664
AI - closed5.0LiteLLM CVE-2026-12771: LiteLLM M2M JWT Handler Has Improper Authorization
Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12771
AI - closedOpenAI AI Agent OpenAI AI Agent Gained Unauthorized Access to Medicare Statistics Portal
Breaches & attacks · Exploited · since 18 Jun 2026
AI - closed7.1Open WebUI CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54012
AI - closed6.5Open WebUI CVE-2026-54019: Open WebUI RAG ACL bypass in Milvus multitenancy mode
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54019
AI - closed6.3Open WebUI CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54021
AI - closed8.8ChromaDB CVE-2026-45830: ChromaDB cross-tenant access vulnerability
Patch now · Disclosed · since 12 Jun 2026 · CVE-2026-45830
AI - closed8.8MCP servers & tools CVE-2026-46519: Access control bypass vulnerability in mcp-server-kubernetes
Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-46519
AI - closed4.3Open WebUI CVE-2026-45386: Open WebUI IDOR Vulnerability in Message Pinning API
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45386
AI - closed4.3Open WebUI CVE-2026-45387: Open WebUI System Prompt Exposure via Shared Model Permissions
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45387
AI - closed8.0Open WebUI CVE-2026-45671: Open WebUI shared-chat file deletion flaw
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45671
AI - closed3.5Open WebUI CVE-2026-45316: Open WebUI incorrect permission check for notes
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45316
AI - closed7.1Open WebUI CVE-2026-45349: Open WebUI broken access control for completions API
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45349
AI - closed5.4Open WebUI CVE-2026-45365: Open WebUI model access control bypass vulnerability
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45365
AI - closed7.6Flowise CVE-2026-42863: FlowiseAI mass assignment allows cross-workspace reassignment
Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-42863
AI - closed7.1Open WebUI CVE-2026-45399: Open WebUI background task disruption vulnerability
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45399
AI - closed8.1Open WebUI Open WebUI Missing Permission Check in Files API
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45301
AI - closed7.1Open WebUI CVE-2026-45350: Open WebUI chat completion API tool restriction bypass
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45350
AI - closed8.3Open WebUI CVE-2026-44570: Open WebUI Inconsistent Authorization in Memories API
Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44570
AI - closed5.4Open WebUI CVE-2026-44563: Open WebUI Ollama Model Access Control Bypass
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44563
AI - closed7.3Open WebUI CVE-2026-44567: Open WebUI Improper Authorization Control Vulnerability
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44567
AI - closed5.4Open WebUI CVE-2026-44564: Read-Only Open WebUI Users Can Modify Collaborative Docs
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44564
AI - closed5.4Open WebUI CVE-2026-44561: Open WebUI Deactivated Channel Members Retain Access
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44561
AI - closed6.5Open WebUI CVE-2026-44562: Open WebUI Model Import Overwrites Models
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44562
AI - closed4.3Open WebUI CVE-2026-44559: Open WebUI missing access check on channel members
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44559
AI - closed7.1Open WebUI CVE-2026-44556: Open WebUI responses endpoint lacks authorization
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44556
AI - closed5.4Open WebUI CVE-2026-44558: Open WebUI channel access control bypass
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44558
AI - closedGemini Google Gemini Accessed Protected Corporate Systems During Evaluation
Research · since 1 May 2026
AI - closed5.3Dify CVE-2026-34082: Authorization flaw in Dify allows chat deletion
Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-34082
AI - closed8.1Flowise CVE-2026-41267: Flowise account registration mass assignment vulnerability
Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41267
AI - closed7.7Open WebUI CVE-2026-34222: Open WebUI Broken Access Control in Tool Valves
Patch now · Disclosed · since 1 Apr 2026 · CVE-2026-34222
AI - closed5.4Open WebUI CVE-2026-29070: Open WebUI unauthorized deletion of knowledge files
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-29070
AI - closed7.5Langflow Langflow unauthenticated IDOR vulnerability on image downloads
Patch now · Disclosed · since 20 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33484
AI - closed8.7Langflow Langflow profile picture endpoint path traversal vulnerability
Patch now · Disclosed · since 20 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33497
AI - closed7.7Claude Code + SDKs Claude Code workspace trust dialog bypass via settings file
Patch now · Disclosed · since 19 Mar 2026 · updated 20 Mar 2026 · CVE-2026-33068
AI - closed2.7AnythingLLM CVE-2026-32717: API key bypass for suspended users in AnythingLLM
Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32717
AI - closed7.7Flowise CVE-2026-30824: Flowise Missing Authentication on NVIDIA NIM Endpoints
Patch now · Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30824
AI - closedLilli AI platform Autonomous Agent Exploits Vulnerabilities in McKinsey Lilli Platform
Patch now · Exploited · since 28 Feb 2026
AI - closed5.7Lobe Chat CVE-2026-23835: LobeHub improper authorization in presigned upload
Patch now · Disclosed · since 1 Feb 2026 · CVE-2026-23835
AI - closed2.1Open WebUI CVE-2025-63681: Open WebUI Incorrect Access Control Vulnerability
Patch now · Disclosed · since 4 Dec 2025 · CVE-2025-63681
AI - closed5.7GitHub Copilot CVE-2025-64660: GitHub Copilot and VS Code Access Control Vulnerability
Patch now · Disclosed · since 20 Nov 2025 · CVE-2025-64660
AI - closedFlowise Flowise fails to invalidate sessions after password changes
Patch now · Disclosed · since 14 Nov 2025
AI - closedFastMCP FastMCP auth integration confused deputy issue
Patch now · Disclosed · since 29 Oct 2025
AI - closed6.0Dify CVE-2025-59422: Broken access control vulnerability in Dify exposes chat messages
Patch now · Disclosed · since 25 Sep 2025 · CVE-2025-59422
AI - closed8.8Claude Code + SDKs CVE-2025-52882: Claude Code improper authorization via websocket connections
Patch now · Disclosed · since 23 Jun 2025 · updated 24 Jun 2025 · CVE-2025-52882
AI - closed6.5Dify CVE-2025-32796: Access Control Flaw in Dify LLM App Platform
Patch now · Disclosed · since 18 Apr 2025 · CVE-2025-32796
AI - closed4.3AnythingLLM CVE-2024-13060: Access control flaw in AnythingLLM profile picture access
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-13060
AI - closed4.3Open WebUI CVE-2024-7046: Open WebUI Access Control Flaw Exposes Admin Details
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7046
AI - closed4.3Open WebUI Open WebUI Improper Access Control Leads to Arbitrary Prompt Read
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7045
AI - closed6.5NVIDIA Riva CVE-2025-23243: NVIDIA Riva improper access control vulnerability
Patch now · Disclosed · since 11 Mar 2025 · CVE-2025-23243
AI - closed7.3NVIDIA Riva CVE-2025-23242: Improper access control in NVIDIA Riva
Patch now · Disclosed · since 11 Mar 2025 · CVE-2025-23242
AI - closed9.1Gradio CVE-2025-23042: Gradio blocked path ACL bypass vulnerability
Patch now · Disclosed · since 14 Jan 2025 · CVE-2025-23042
AI - closedMeta AI Meta AI Vulnerability Allowed Unauthorized Access to Prompts
Patch now · Disclosed · since 26 Dec 2024
AI - closed5.3LiteLLM CVE-2024-5710: Improper access control in litellm team management
Patch now · Disclosed · since 27 Jun 2024 · CVE-2024-5710
AI - closed4.3Gradio CVE-2024-1727: Gradio Local Route Access Vulnerability
Patch now · Disclosed · since 21 May 2024 · updated 21 May 2024 · CVE-2024-1727
AI - closed5.3Lobe Chat CVE-2024-24566: Lobe Chat Vulnerable to Unauthorized Access to Plugins
Patch now · Disclosed · since 31 Jan 2024 · CVE-2024-24566
AI