websocket

Records5

1. closed9.8
   gpt-researcher CVE-2026-37006: RCE vulnerability in gpt-researcher WebSocket endpoint

   Patch now · Disclosed · since 27 Aug 2026 · CVE-2026-37006

   AI
2. closed7.6
   MCP SDKs CVE-2026-59950: MCP Python SDK WebSocket server lacks Host and Origin validation

   Patch now · Disclosed · since 16 Jul 2026 · updated 16 Jul 2026 · CVE-2026-59950

   AI
3. closed3.1
   Open WebUI CVE-2026-59715: Open WebUI unauthenticated WebSocket document access

   Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59715

   AI
4. closed8.7
   Claude Code UI Cloud CLI WebSocket shell OS command injection vulnerability

   Patch now · Disclosed · since 11 Mar 2026 · CVE-2026-31975

   AI
5. closed8.8
   Claude Code + SDKs CVE-2025-52882: Claude Code improper authorization via websocket connections

   Patch now · Disclosed · since 23 Jun 2025 · updated 24 Jun 2025 · CVE-2025-52882

   AI