Daily Digest
The most urgent vulnerability is CVE-2026-61781 in PostgreSQL's pg_partman extension (CVSS 9.9 CRITICAL), which allows authenticated attackers with partman_user privileges to escalate to superuser and execute arbitrary OS commands via SQL injection in partition maintenance functions. This flaw enables full database and system compromise, requiring immediate patching to version 5.5.0.
Summary: A SQL injection vulnerability in pg_partman's create_partition_time() function allows authenticated users with partman_user privileges to inject malicious SQL that executes with superuser privileges when the background worker creates partitions. This can lead to full database compromise and OS command execution as the PostgreSQL service account.
Affected Features / Interoperability: The pg_partman extension's partition creation and maintenance functions, specifically the time_encoder configuration parameter and background worker (pg_partman_bgw) role. Exploitation affects all systems using pg_partman for time-based partitioned tables.
Source: https://github.com/pgpartman/pg_partman/commit/ba9405542acf24dd881845b935cab8b165854361, https://github.com/pgpartman/pg_partman/releases/tag/v5.5.0, https://github.com/pgpartman/pg_partman/security/advisories/GHSA-742w-3j7c-qwvp
Actions:
Summary: SQL injection in Magistrala's timescale-reader and postgres-reader HTTP API services allows authenticated attackers to inject arbitrary SQL via the format query parameter, enabling cross-tenant data access, password hash extraction, file read/write, and OS command execution as the postgres user.
Affected Features / Interoperability: HTTP API services in Magistrala's reader components; affects all PostgreSQL backends connected through these APIs.
Source: https://github.com/absmach/magistrala/pull/3581, https://github.com/absmach/magistrala/releases/tag/v1.0.0, https://www.vulncheck.com/advisories/magistrala-sql-injection-via-format-parameter-in-reader-api
Actions:
Summary: SQL injection via exception handling in pg_partman's pg_jobmon integration allows partman_user to inject SQL through crafted parent table names containing single quotes, executing with superuser privileges when exceptions occur.
Affected Features / Interoperability: pg_partman's exception handling when pg_jobmon is enabled; affects systems using job monitoring with partitioned tables.
Source: https://github.com/pgpartman/pg_partman/commit/ba9405542acf24dd881845b935cab8b165854361, https://github.com/pgpartman/pg_partman/releases/tag/v5.5.0, https://github.com/pgpartman/pg_partman/security/advisories/GHSA-gv5h-j2cm-rhc3
Actions:
Summary: SQL injection via unescaped double quotes in pg_partman's inherit_template_properties() function allows partman_user to break out of identifier quoting when creating primary keys, executing SQL with superuser privileges.
Affected Features / Interoperability: Template table handling in pg_partman; affects systems using custom template tables for partition inheritance.
Source: https://github.com/pgpartman/pg_partman/commit/ba9405542acf24dd881845b935cab8b165854361, https://github.com/pgpartman/pg_partman/releases/tag/v5.5.0, https://github.com/pgpartman/pg_partman/security/advisories/GHSA-xqxh-6hh3-974m
Actions:
Summary: Warpgate's recording stream API endpoint lacks admin permission checks, allowing authenticated regular users to access real-time terminal sessions (including credentials) from SSH, MySQL, and PostgreSQL connections.
Affected Features / Interoperability: Warpgate's admin API for session recordings; affects all systems using Warpgate as a bastion host.
Source: https://github.com/warp-tech/warpgate/commit/f5cb06ea09065f375870ccee64fe721a2ca79766, https://github.com/warp-tech/warpgate/releases/tag/v0.25.6, https://github.com/warp-tech/warpgate/security/advisories/GHSA-2q37-6vxr-26jr
Actions:
Summary: Exception handling in pg_partman's run_maintenance() function terminates processing after a single failure, allowing partman_user to disrupt maintenance for all partition sets by inserting failing rows with low maintenance_order values.
Affected Features / Interoperability: pg_partman's maintenance scheduling; affects automated partition maintenance workflows.
Source: https://github.com/pgpartman/pg_partman/commit/ba9405542acf24dd881845b935cab8b165854361, https://github.com/pgpartman/pg_partman/releases/tag/v5.5.0, https://github.com/pgpartman/pg_partman/security/advisories/GHSA-9m6c-hw23-c6h2
Actions:
Summary: SQL injection in llmware's collection-database layer allows attackers to bypass filters and access unauthorized data via string-interpolated WHERE clauses in Library.block_lookup and Query.text_query_with_custom_filter endpoints.
Affected Features / Interoperability: llmware's database query layer; affects all PostgreSQL backends used by llmware applications.
Source: https://github.com/llmware-ai/llmware, https://github.com/llmware-ai/llmware/blob/v0.4.6/llmware/resources.py, https://github.com/llmware-ai/llmware/issues/1304, https://www.vulncheck.com/advisories/llmware-0.4.6-sql-injection-via-unescaped-filter-values
Actions:
Summary: Missing upper bound on SCRAM authentication iteration count in PgBouncer allows malicious backends to cause CPU exhaustion, disrupting all pooled database connections.
Affected Features / Interoperability: PgBouncer's authentication handling; affects all clients using PgBouncer connection pooling.
Source: https://www.pgbouncer.org/changelog.html
Actions:
Summary: Django's HostList.list() exposes internal error messages and ORM schema details through unescaped exception handling, leaking database structure information.
Affected Features / Interoperability: Django REST API error handling; affects applications using Django with PostgreSQL backends.
Source: https://access.redhat.com/errata/RHSA-2026:71177, https://access.redhat.com/security/cve/CVE-2026-71461, https://bugzilla.redhat.com/show_bug.cgi?id=2512370
Actions:
Summary: SQLBot's datasource preview endpoint allows authenticated users to execute pg_read_file(), pg_read_binary_file(), or pg_ls_dir() functions via crafted table names, potentially exposing sensitive files including /etc/passwd and credentials.
Affected Features / Interoperability: SQLBot's internal PostgreSQL service; affects all systems using SQLBot's data preview functionality.
Source: https://github.com/dataease/SQLBot/commit/76b5176b0e394740fd07c0d1769c0c792e8cb3b4, https://github.com/dataease/SQLBot/pull/1156, https://github.com/dataease/SQLBot/releases/tag/v1.9.0, https://github.com/dataease/SQLBot/security/advisories/GHSA-vwjq-5h4h-x8g5
Actions:
Summary: Warpgate's recording stream API endpoint lacks admin permission checks, allowing authenticated regular users to access real-time terminal sessions (including credentials) from SSH, MySQL, and PostgreSQL connections.
Affected Features / Interoperability: Warpgate's admin API for session recordings; affects all systems using Warpgate as a bastion host.
Source: https://github.com/warp-tech/warpgate/commit/f5cb06ea09065f375870ccee64fe721a2ca79766, https://github.com/warp-tech/warpgate/releases/tag/v0.25.6, https://github.com/warp-tech/warpgate/security/advisories/GHSA-2q37-6vxr-26jr
Actions:
Summary: SQL injection in Restaurant-Management-System's admin/display_menu.php allows remote attackers to manipulate the s1 parameter in search forms, enabling database manipulation.
Affected Features / Interoperability: Search form functionality in Restaurant-Management-System; affects systems using this application for menu management.
Source: https://github.com/AdithyaYelloju/Restaurant-Management-System/, https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/4, https://vuldb.com/cve/CVE-2026-95868, https://vuldb.com/submit/953178, https://vuldb.com/vuln/408542
Actions:
Summary: Froxlor's Mysqls.add API command fails to validate mysql_server parameter against customer allowlists, allowing customers to create databases on unauthorized servers.
Affected Features / Interoperability: Froxlor's MySQL API; affects multi-server hosting environments using Froxlor for customer management.
Source: https://github.com/froxlor/froxlor/security/advisories/GHSA-q4rm-m6xh-5pv7, https://www.vulncheck.com/advisories/froxlor-before-2.3.7-authorization-bypass-via-mysqls-add-api, https://github.com/froxlor/froxlor/security/advisories/GHSA-q4rm-m6xh-5pv7
Actions:
Summary: MariaDB Connector/J processes LOCAL INFILE packets without enforcing allowLocalInfile=false, allowing rogue servers to force file transmission from applications connecting over untrusted connections.
Affected Features / Interoperability: MariaDB Connector/J's LOCAL INFILE handling; affects Java applications using the connector for database connections.
Source: https://github.com/mariadb-corporation/mariadb-connector-j/commit/0205d8be947918566cd9ce5a9db149541bbc8dee, https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9, https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wxmm-q36w-r9xj
Actions:
Summary: Ground Station's Socket.IO server allows unauthenticated SSRF via orbital-source configuration, enabling attackers to make outbound HTTP requests to arbitrary destinations including cloud metadata endpoints.
Affected Features / Interoperability: Ground Station's Socket.IO API and HTTP request handling; affects systems using Ground Station for satellite data processing.
Source: https://github.com/sgoudelis/ground-station, https://github.com/sgoudelis/ground-station/commit/2ecde82a8814cbea18883ce023bf45cbf06172eb, https://github.com/sgoudelis/ground-station/security/advisories/GHSA-mjp8-x6h7-229q
Actions:
Summary: Ansible Automation Platform's WorkflowJobNode.ancestor_artifacts column exposes no_log secrets through REST API filtering, allowing authenticated users to recover masked credentials.
Affected Features / Interoperability: Ansible's workflow job artifacts storage; affects environments using Ansible for infrastructure automation.
Source: https://access.redhat.com/errata/RHSA-2026:71113, https://access.redhat.com/errata/RHSA-2026:71114, https://access.redhat.com/errata/RHSA-2026:71177, https://access.redhat.com/errata/RHSA-2026:71179, https://access.redhat.com/security/cve/CVE-2026-84720
Actions:
Summary: Dolibarr's sqlfilters API parameter allows case-sensitive denylist bypass, enabling authenticated attackers to extract password hashes via uppercase field name variants.
Affected Features / Interoperability: Dolibarr's SQL filtering API; affects systems using Dolibarr for CRM/ERP with database backends.
Source: https://github.com/Dolibarr/dolibarr/commit/7a04d9c970e45e15d29c91e6f5a34a262c6c51c8, https://github.com/Dolibarr/dolibarr/releases/tag/24.0.1, https://www.vulncheck.com/advisories/dolibarr-sql-filter-denylist-bypass-via-sqlfilters-parameter
Actions:
Summary: CordysCRM's SortRequest.name parameter allows authenticated users to inject SQL functions via ORDER BY clauses, enabling error-based data extraction.
Affected Features / Interoperability: CordysCRM's account pool sorting functionality; affects CRM systems using this component.
Source: https://github.com/1Panel-dev/CordysCRM/commit/3e6a7003ac5c94bc1166c6065e64420be2f188a8, https://github.com/1Panel-dev/CordysCRM/commit/b217166af2935c827c8d73bf55c563dd328692f5, https://github.com/1Panel-dev/CordysCRM/pull/2975, https://github.com/1Panel-dev/CordysCRM/releases/tag/v1.7.4, https://github.com/1Panel-dev/CordysCRM/security/advisories/GHSA-x6p7-vhgp-6r3q
Actions:
Summary: Flowise's MongoDBMemory node fails to sanitize sessionId parameter, allowing unauthenticated attackers to inject MongoDB operators and access other users' chat history.
Affected Features / Interoperability: Flowise's MongoDB integration for chat history; affects systems using Flowise with MongoDB backends.
Source: https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wpvf-4vfx-rgxm, https://www.vulncheck.com/advisories/flowise-before-3.1.4-nosql-injection-via-sessionid
Actions:
Summary: Laravel MongoDB's cache lock implementation evaluates caller-supplied lock owner values as aggregation expressions, allowing authenticated users to hijack or expire other processes' locks.
Affected Features / Interoperability: Laravel's MongoDB cache locking; affects applications using Laravel with MongoDB for caching.
Source: https://github.com/mongodb/laravel-mongodb/pull/3579, https://github.com/mongodb/laravel-mongodb/releases/tag/5.11.0
Actions:
Summary: MongoDB Compass interpolates database names without escaping into the embedded MongoDB shell, allowing database creators to execute shell commands when users open the shell for crafted databases.
Affected Features / Interoperability: MongoDB Compass's shell integration; affects users connecting to databases with maliciously named schemas.
Source: https://github.com/mongodb-js/compass/releases/tag/v1.49.12
Actions:
Summary: MongoDB C Driver's connection monitoring has an out-of-bounds write vulnerability when processing host responses, potentially causing application crashes.
Affected Features / Interoperability: MongoDB C Driver's connection string handling; affects applications using the driver for database connections.
Source: https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.12, https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.5
Actions:
Summary: MongoDB Connector for BI crashes when processing crafted Kerberos authentication exchanges, causing denial of service for BI Connector deployments.
Affected Features / Interoperability: MongoDB Connector for BI's Kerberos authentication; affects BI systems using Kerberos for database access.
Source: https://www.mongodb.com/docs/bi-connector/current/release-notes/#mongodb-connector-for-bi-2.14.30
Actions:
Summary: MongoDB PHP Driver's command monitoring deserializes untrusted data, potentially allowing unauthenticated attackers to instantiate application classes with malicious payloads.
Affected Features / Interoperability: MongoDB PHP Driver's monitoring subsystem; affects PHP applications using the driver with command monitoring enabled.
Source: https://github.com/mongodb/mongo-php-driver/pull/2115, https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.10, https://github.com/mongodb/mongo-php-driver/releases/tag/2.1.10, https://github.com/mongodb/mongo-php-driver/releases/tag/2.5.3
Actions:
Summary: MongoDB Entity Framework Core Provider silently loses TLS and schema-map settings when combining encryption configurations, storing protected fields unencrypted.
Affected Features / Interoperability: MongoDB EF Core Provider's encryption handling; affects .NET applications using the provider with field-level encryption.
Source: https://jira.mongodb.org/browse/EF-388
Actions:
Summary: MongoDB Entity Framework Core Provider disables field-level encryption when database names are specified in connection strings.
Affected Features / Interoperability: MongoDB EF Core Provider's connection string parsing; affects .NET applications using database names in connection strings with encryption enabled.
Source: https://jira.mongodb.org/browse/EF-389
Actions:
Summary: MongoDB Entity Framework Core Provider logs sensitive information (passwords, AWS keys) in DEBUG mode or with malformed connection strings.
Affected Features / Interoperability: MongoDB EF Core Provider's logging; affects applications with DEBUG logging enabled or invalid connection strings.
Source: https://jira.mongodb.org/browse/EF-384
Actions:
Summary: MongoDB Connector for BI writes TLS private-key passwords to stderr when supplied via both URI and command-line options, exposing credentials to local users.
Affected Features / Interoperability: MongoDB Connector for BI's TLS handling; affects deployments using TLS with password-provided keys.
Source: https://www.mongodb.com/docs/bi-connector/current/release-notes/#mongodb-connector-for-bi-2.14.30
Actions:
One-paragraph executive summary, highlighting the single most urgent item (a CISA KEV-confirmed entry always outranks a merely high-CVSS entry, since it's confirmed exploitation vs. theoretical severity).
Summary: An out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Affected Features / Interoperability: The flaw impacts the Azure Attestation service and its Device Health Attestation component, potentially compromising authentication and integrity mechanisms for cloud-based identity and device trust mechanisms.
Actions:
Summary: A flaw in the AAP Controller’s HashiCorp Vault credential plugin allows an authenticated attacker with credential‑creation privileges to exfiltrate the controller pod’s Kubernetes service account token, granting full API access to control‑plane namespaces and sensitive resources such as database credentials and the Django SECRET_KEY.
Affected Features / Interoperability: The flaw affects the `kubernetes_auth()` function in the `awx_plugins/credentials/hashivault.py` module, enabling unauthorized API access to control‑plane namespaces and compromising secrets, including database credentials.
Source: https://access.redhat.com/errata/RHSA-2026:67279
https://access.redhat.com/errata/RHSA-2026:71113
https://access.redhat.com/errata/RHSA-2026:71114
https://access.redhat.com/errata/RHSA-2026:71115
https://access.redhat.com/errata/RHSA-2026:71179
Actions:
Summary: A server‑side request forgery (SSRF) flaw in the Ansible Automation Platform email notification backend allows an authenticated user with organization notification‑admin permission to create or modify a template that points to an internal address, causing the controller to open a raw TCP connection to that address and leak connection status, effectively providing a three‑state port‑scan oracle over the control‑plane network.
Affected Features / Interoperability: Affects the Ansible Automation Platform email notification backend; enables internal port‑scan oracle attacks on the control‑plane network and can lead to credential leakage if stored SMTP passwords are present in templates.
Source: https://access.redhat.com/errata/RHSA-2026:71177
https://access.redhat.com/security/cve/CVE-2026-84721
https://bugzilla.redhat.com/show_bug.cgi?id=2527220
Actions:
Summary: In Gardener versions prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin’s `mustCheckProjectMembers` check compares only User subjects, ignoring Group and ServiceAccount subjects, allowing a project administrator lacking `manage-members` permission to add arbitrary Group or ServiceAccount subjects (e.g., `system:authenticated`) and grant broad project access.
Affected Features / Interoperability: Affects the Gardener `customverbauthorizer` admission plugin’s `mustCheckProjectMembers` logic, enabling unauthorized project member modifications that can grant Shoots, Secrets, and cloud provider credentials.
Source: https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
https://github.com/gardener/gardener/pull/15080
https://github.com/gardener/gardener/releases/tag/v1.144.2
https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
Actions:
Summary: Prior to versions 1.142.6, 1.143.3, 1.144.2, and 1.145.0, Gardener’s `customverbauthorizer` admission plugin fails to account for Group and ServiceAccount subjects in `Project.spec.members`, allowing a project administrator lacking `manage-members` permission to add arbitrary Group or ServiceAccount subjects (e.g., `system:authenticated`) and thereby grant extensive project access.
Affected Features / Interoperability: Affects the `customverbauthorizer` admission plugin’s `mustCheckProjectMembers` logic, potentially granting unintended broad access to Shoots, Secrets, and cloud provider credentials within Kubernetes projects.
Source: https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
https://github.com/gardener/gardener/pull/15080
https://github.com/gardener/gardener/releases/tag/v1.144.2
https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
Actions:
Summary: MLRun through version 1.11.0 contains a server‑side request forgery (SSRF) vulnerability in the WebhookNotification handler, allowing authenticated users to make the API server issue arbitrary HTTP requests to internal addresses when a run reaches a terminal state.
Affected Features / Interoperability: Affects the MLRun WebhookNotification handler, enabling attackers to issue arbitrary HTTP requests from within the cluster to internal services, Kubernetes APIs, or cloud metadata endpoints.
Source: https://github.com/mlrun/mlrun
https://github.com/mlrun/mlrun/issues/10041
https://www.vulncheck.com/advisories/mlrun-through-1.11.0-server-side-request-forgery-via-webhook
https://github.com/mlrun/mlrun/issues/10041
Actions:
Summary: In Gardener versions prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin’s `mustCheckProjectMembers` check compares only User subjects but ignores Group or ServiceAccount subjects in `Project.spec.members`, allowing a project administrator lacking `manage-members` permission to add arbitrary Group or ServiceAccount subjects (e.g., `system:authenticated`) and grant broad project access.
Affected Features / Interoperability: Affects the Gardener `customverbauthorizer` admission plugin’s `mustCheckProjectMembers` logic, potentially granting unintended broad project access including Shoots, Secrets, and cloud provider credentials.
Source: https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
https://github.com/gardener/gardener/pull/15080
https://github.com/gardener/gardener/releases/tag/v1.144.2
https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
Actions:
Summary: MLRun through version 1.11.0 contains a server‑side request forgery (SSRF) vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses, enabling requests to internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.
Affected Features / Interoperability: Affects the MLRun WebhookNotification handler, enabling SSRF attacks that can reach internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.
Source: https://github.com/mlrun/mlrun
https://github.com/mlrun/mlrun/issues/10041
https://www.vulncheck.com/advisories/mlrun-through-1.11.0-server-side-request-forgery-via-webhook
https://github.com/mlrun/mlrun/issues/10041
Actions:
Summary: In Gardener versions prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin’s `mustCheckProjectMembers` check compares only User subjects but ignores Group or ServiceAccount subjects in `Project.spec.members`, allowing a project administrator lacking `manage-members` permission to add arbitrary Group or ServiceAccount subjects (e.g., `system:authenticated`) and thereby grant broad project access.
Affected Features / Interoperability: Affects the Gardener `customverbauthorizer` admission plugin’s `mustCheckProjectMembers` logic, potentially granting unintended broad project access including Shoots, Secrets, and cloud provider credentials.
Source: https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
https://github.com/gardener/gardener/pull/15080
https://github.com/gardener/gardener/releases/tag/v1.144.2
https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
Actions:
Summary: In Gardener versions prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin’s `mustCheckProjectMembers` check compares only User subjects but ignores Group or ServiceAccount subjects in `Project.spec.members`, allowing a project administrator lacking `manage-members` permission to add arbitrary Group or ServiceAccount subjects (e.g., `system:authenticated`) and thereby grant broad project access.
Affected Features / Interoperability: Affects the Gardener `customverbauthorizer` admission plugin’s `mustCheckProjectMembers` logic, potentially granting unintended broad project access including Shoots, Secrets, and cloud provider credentials.
Source: https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
https://github.com/gardener/gardener/pull/15080
https://github.com/gardener/gardener/releases/tag/v1.144.2
https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
Actions:
Summary: In Gardener versions prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin’s `mustCheckProjectMembers` check compares only User subjects but ignores Group or ServiceAccount subjects in `Project.spec.members`, allowing a project administrator lacking `manage-members` permission to add arbitrary Group or ServiceAccount subjects (e.g., `system:authenticated`) and thereby grant broad project access.
Affected Features / Interoperability: Affects the Gardener `customverbauthorizer` admission plugin’s `mustCheckProjectMembers` logic, potentially granting unintended broad project access including Shoots, Secrets, and cloud provider credentials.
Source: https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
https://github.com/gardener/gardener/pull/15080
https://github.com/gardener/gardener/releases/tag/v1.144.2
https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
Actions:
Summary: Dokploy prior to version 0.29.13 allows an authenticated organization member with `service:read` permission to inject shell metacharacters into the `repoPath` parameter of the `patch.readRepoDirectories` tRPC procedure, leading to arbitrary command execution as root inside the Dokploy container via `child_process.exec`, and due to the mounted Docker socket, enabling host compromise.
Affected Features / Interoperability: Affects the Dokploy `patch.readRepoDirectories` tRPC procedure; enables arbitrary command execution as root inside the Dokploy container, potentially compromising the host and all managed applications via the Docker socket.
Source: https://github.com/Dokploy/dokploy/commit/16b5b7293f9883327a89c69fcb6e5718767b064a
https://github.com/Dokploy/dokploy/releases/tag/v0.29.13
https://github.com/Dokploy/dokploy/security/advisories/GHSA-56g6-wjr4-5q7p
Actions:
Summary: Dockge’s path validation is only performed on the write path; the `getStack` method returns a path that can be manipulated via traversal sequences, allowing an authenticated user to access arbitrary files on the host (e.g., `.env` or `docker-compose.yml`) and delete directories via `docker compose down` and `fsAsync.rm`.
Affected Features / Interoperability: Affects Dockge’s stack name handling and socket‑handler path resolution, enabling unauthorized file disclosure and deletion, which can impact any host files accessible to the Dockge process (including unrelated applications).
Source: https://github.com/louislam/dockge
https://github.com/louislam/dockge/blob/1.5.0/backend/stack.ts#L155-L157
https://github.com/louislam/dockge/blob/1.5.0/backend/stack.ts#L218-L232
https://github.com/louislam/dockge/blob/1.5.0/backend/stack.ts#L377-L379
Actions:
Summary: LangBot’s plugin runtime (pip package `langbot_plugin`) through version 0.4.17 starts an unauthenticated debug WebSocket server on `0.0.0.0:5401` (`/plugin/ws`) whose authentication relies on a default empty `plugin_debug_key`; any remote attacker can register an arbitrary debug plugin without credentials, gaining full access to all IM message context, forging replies, and enumerating bots and LLM models.
Source: https://github.com/langbot-app/LangBot/security/advisories/GHSA-m7qm-2mjr-2h4q
Actions:
Summary: Ground Station prior to version 0.6.0 contains an unauthenticated denial‑of‑service vulnerability in the Socket.IO server’s `service_control` event handler, allowing any unauthenticated network peer to forcibly terminate the ground‑station process by sending a single `restart_service` command, thereby disrupting satellite‑tracking, SDR recording, and other satellite‑related services.
Affected Features / Interoperability: Affects the Ground Station Socket.IO server’s `service_control` handler; enables unauthenticated termination of the ground‑station process, disrupting satellite‑tracking, SDR recording, demodulation, decoding, and rotator controller operations, with potential persistent denial‑of‑service in Docker deployments.
Source: https://github.com/sgoudelis/ground-station
https://github.com/sgoudelis/ground-station/commit/2ecde82a8814cbea18883ce023bf45cbf06172eb
https://github.com/sgoudelis/ground-station/security/advisories/GHSA-mjp8-x6h7-229q
Actions:
Summary: LangBot’s plugin runtime (pip package `langbot_plugin`) through version 0.4.17 starts an unauthenticated debug WebSocket server on `0.0.0.0:5401` (`/plugin/ws`) whose authentication relies on a default empty `plugin_debug_key`; any remote attacker can register an arbitrary “debug plugin” without credentials, gaining full access to all IM message context, forging replies, enumerating bots, invoking LLM models, and registering malicious tools that affect all users.
Source: https://github.com/langbot-app/LangBot/security/advisories/GHSA-m7qm-2mjr-2h4q
Actions:
Summary: Ground Station prior to version 0.6.0 contains an unauthenticated denial‑of‑service vulnerability in the Socket.IO server’s `service_control` event handler that allows any unauthenticated network peer to forcibly terminate the ground‑station process by sending a single `restart_service` command, thereby disrupting satellite‑tracking, SDR recording, and other satellite‑related services, with repeated triggering possible in Docker deployments to create a persistent denial‑of‑service condition.
Affected Features / Interoperability: Affects the Ground Station Socket.IO server’s `service_control` event handler; enables unauthenticated termination of the ground‑station process, disrupting satellite‑tracking, SDR recording, demodulators, decoders, and rotator controllers, with potential persistent denial‑of‑service in Docker deployments.
Source: https://github.com/sgoudelis/ground-station
https://github.com/sgoudelis/ground-station/commit/2ecde82a8814cbea18883ce023bf45cbf06172eb
https://github.com/sgoudelis/ground-station/security/advisories/GHSA-mjp8-x6h7-229q
Actions:
Summary: LangBot’s plugin runtime (pip package `langbot_plugin`) through version 0.4.17 starts an unauthenticated debug WebSocket server on `0.0.0.0:5401` (`/plugin/ws`) whose authentication relies on a default empty `plugin_debug_key`; any remote attacker can register an arbitrary “debug plugin” without credentials, gaining full access to all IM message context, forging replies, sending messages as any bot, enumerating bot UUIDs, invoking LLM models, reading knowledge‑base contents, and registering malicious tools that affect every user’s LLM pipeline. `prod_mode: true` later causes persistent denial of service when legitimate plugin installations are rejected.
Source: https://github.com/langbot-app/LangBot/security/advisories/GHSA-m7qm-2mjr-2h4q
Actions:
Summary: Ground Station prior to version 0.6.0 contains an unauthenticated denial‑of‑service vulnerability in the Socket.IO server’s `service_control` event handler that allows any unauthenticated network peer to forcibly terminate the ground‑station process by sending a single `restart_service` command, thereby disrupting satellite‑tracking, SDR recording, and other satellite‑related services, with repeated triggering possible in Docker deployments to create a persistent denial‑of‑service condition.
Affected Features / Interoperability: Affects the Ground Station Socket.IO server’s `service_control` event handler; enables unauthenticated termination of the ground‑station process, disrupting satellite‑tracking, SDR recording, demodulators, decoders, and rotator controllers, with potential persistent denial‑of‑service in Docker deployments.
Source: https://github.com/sgoudelis/ground-station
https://github.com/sgoudelis/ground-station/commit/2ecde82a8814cbea18883ce023bf45cbf06172eb
https://github.com/sgoudelis/ground-station/security/advisories/GHSA-mjp8-x6h7-229q
Actions:
Summary: LangBot’s plugin runtime (pip package `langbot_plugin`) through version 0.4.17 starts an unauthenticated debug WebSocket server on `0.0.0.0:5401` (`/plugin/ws`) whose authentication relies on a default empty `plugin_debug_key`; any remote attacker can register an arbitrary “debug plugin” without credentials, gaining full access to all IM message context, forging replies, sending messages as any bot, enumerating bot UUIDs, invoking LLM models, reading knowledge‑base contents, and registering malicious tools that affect every user’s LLM pipeline. `prod_mode: true` later causes later legitimate plugin installations to be rejected, resulting in persistent denial of service. No patched version was available at publication.
Source: https://github.com/langbot-app/LangBot/security/advisories/GHSA-m7qm-2mjr-2h4q
Actions:
Summary: Ground Station prior to version 0.6.0 contains an unauthenticated denial‑of‑service vulnerability in the Socket.IO server’s `service_control` event handler that allows any unauthenticated network peer to forcibly terminate the ground‑station process by sending a single `restart_service` command, thereby disrupting satellite‑tracking, SDR recording, and other satellite‑related services, with repeated triggering possible in Docker deployments to create a persistent denial‑of‑service condition.
Affected Features / Interoperability: Affects the Ground Station Socket.IO server’s `service_control` event handler; enables unauthenticated termination of the ground‑station process, disrupting satellite‑tracking, SDR recording, demodulators, decoders, and rotator controllers, with potential persistent denial‑of‑service in Docker deployments.
Source: https://github.com/sgoudelis/ground-station
https://github.com/sgoudelis/ground-station/commit/2ecde82a8814cbea18883ce023bf45cbf06172eb
https://github.com/sgoudelis/ground-station/security/advisories/GHSA-mjp8-x6h7-229q
Actions:
Summary: LangBot’s plugin runtime (pip package `langbot_plugin`) through version 0.4.17 starts an unauthenticated debug WebSocket server on `0.0.0.0:5401` (`/plugin/ws`) whose authentication relies on a default empty `plugin_debug_key`; any remote attacker can register an arbitrary “debug plugin” without credentials, gaining full access to all IM message context, forging replies, sending messages as any bot, enumerating bot UUIDs, invoking LLM models, reading knowledge‑base contents, and registering malicious tools that affect every user’s LLM pipeline. `prod_mode: true` later causes later legitimate plugin installations to be rejected, resulting in persistent denial of service. No patched version was available at publication.
Source: https://github.com/langbot-app/LangBot/security/advisories/GHSA-m7qm-2mjr-2h4q
Actions:
Summary: Ground Station prior to version 0.6.0 contains an unauthenticated denial‑of‑service vulnerability in the Socket.IO server’s `service_control` event handler that allows any unauthenticated network peer to forcibly terminate the ground‑station process by sending a single `restart_service` command, thereby disrupting satellite‑tracking, SDR recording, and other satellite‑related services, with repeated triggering possible in Docker deployments to create a persistent denial‑of‑service condition.
**Affected Features /