Daily Digest
The most urgent issue is CVE‑2025‑34227, a high‑severity (CVSS 8.8) authenticated command injection in Nagios XI wizards that affect MySQL and MongoDB monitoring. Attackers with valid Nagios credentials can inject shell commands into wizard arguments, leading to arbitrary code execution as the `nagios` user on the underlying host. This vulnerability is actively exploitable and should be patched immediately.
Summary: An authenticated command injection exists in Nagios XI versions prior to 2026R1 within the MySQL Query wizard (and other DB wizards). Attackers with valid Nagios credentials can inject shell characters into wizard arguments, leading to arbitrary code execution on the host as the `nagios` user.
Affected Features / Interoperability: The MySQL Query wizard, MySQL Server wizard, and associated Nagios XI monitoring components are impacted. This can affect downstream database monitoring, alerting, and potentially compromise the underlying database servers that are monitored.
Source:
Actions:
Summary: A SQL injection vulnerability in the EmployeeRecruitmentSystem’s login processing component (source/loginprocessing.php) allows remote attackers to manipulate the email/password arguments passed to `mysql_query`, potentially leading to authentication bypass or data exfiltration.
Affected Features / Interoperability: The login handler and underlying MySQL database queries are affected. This can break authentication and allow unauthorized access to recruitment data.
Source:
Actions:
Summary: SQL injection in the EmployeeRecruitmentSystem’s forgot‑password handler (source/authprocessing.php) lets remote attackers modify the `fpemail` argument used in `mysql_query`, potentially enabling account takeover or password reset abuse.
Affected Features / Interoperability: The forgot‑password workflow and associated MySQL queries are impacted, affecting user account recovery and data confidentiality.
Source:
Actions:
Summary: SQL injection in the EmployeeRecruitmentSystem’s registration handler (source/adminregister.php) allows remote attackers to manipulate arguments passed to `mysql_query`, potentially leading to unauthorized account creation or data manipulation.
Affected Features / Interoperability: The registration process and underlying MySQL database interactions are affected, compromising user provisioning and system integrity.
Source:
Actions:
Summary: A missing authentication flaw in the Learning‑Management‑System’s `remove_announcements.php` endpoint allows remote attackers to manipulate the ID parameter, bypassing required authentication checks.
Affected Features / Interoperability: The announcement removal functionality and associated database operations are impacted, potentially enabling unauthorized content deletion.
Source:
Actions:
Summary: Django’s QuerySet methods (annotate, alias, aggregate, extra) are vulnerable to SQL injection via column aliases when using user‑controlled dictionary keys on MySQL/MariaDB. Attackers can craft dictionary inputs to execute arbitrary SQL.
Affected Features / Interoperability: Django ORM features for dynamic query building are affected, potentially compromising data integrity across any Django‑based application using MySQL/MariaDB.
Source:
Actions:
Summary: Adminer versions prior to 5.4.3 embed unsanitized MySQL server version strings into script tags with CSP nonces, allowing attackers who control a rogue MySQL server to break out of JavaScript context and execute arbitrary code, bypassing Content Security Policy.
Affected Features / Interoperability: Adminer’s database management interface and its interaction with MySQL server version reporting are impacted, potentially leading to client‑side code execution.
Source:
Actions:
Summary: An authenticated command injection in Nagios XI versions before 2026R1 affects the MongoDB Database wizard, allowing attackers with Nagios credentials to inject shell commands and execute them as the `nagios` user on the host.
Affected Features / Interoperability: The MongoDB wizard and associated monitoring components are impacted, potentially compromising the MongoDB servers being monitored and the Nagios host.
Source:
Actions:
The most urgent item is CVE-2025-59823 (CVSS 9.9) in Project Gardener's Terraform/Terraformer integration: a code-injection flaw in multiple cloud-provider extensions (AWS, Azure, GCP, OpenStack) that lets a project admin escalate to full control of the seed cluster managing their shoot clusters. No CISA KEV entries appear in this dataset, so this highest-CVSS vulnerability — affecting the control plane of managed Kubernetes clusters — takes top priority. Also critical: Azure API Management cross-tenant signup bypass (CVE-2025-66390, CVSS 9.8), Docker/Termix authentication bypass (CVE-2025-59951, CVSS 9.1), and three Argo CD DoS flaws (CVE-2025-59531/59537/59538, CVSS 7.5 each).
Summary: When self-service signup (Basic Auth) is enabled in one Azure API Management tenant, an attacker can manipulate the Host header or tenant identifier to register against a different tenant that has signup disabled in the UI. The underlying API endpoint still accepts cross-tenant requests, effectively bypassing the UI-level disable control. Microsoft disputes this as a security boundary crossing, calling it a configuration/state issue.
Affected Features / Interoperability: Azure API Management self-service signup endpoint; tenant isolation controls. Downstream impact: unauthorized developer accounts created in tenants that intended to block signup, potentially leading to API consumption abuse or further social-engineering footholds.
Source: https://github.com/bountyyfi/Azure-APIM-Cross-Tenant-Signup-Bypass, https://github.com/bountyyfi/Azure-APIM-Cross-Tenant-Signup-Bypass/security/advisories/GHSA-vcwf-73jp-r7mv
Actions:
Summary: Code injection in Gardener Extensions for AWS (pre-1.64.0), Azure (pre-1.55.0), OpenStack (pre-1.49.0), and GCP (pre-1.46.0) providers. A user with admin privileges in a Gardener project can exploit Terraformer-driven infrastructure provisioning to execute code on the seed cluster, gaining full control over the management plane of all shoot clusters.
Affected Features / Interoperability: Gardener Extension providers (AWS, Azure, GCP, OpenStack) when Terraformer is used/enabled for infrastructure provisioning. Downstream: complete seed-cluster compromise, affecting all managed shoot clusters, their workloads, and any integrated secrets/identity systems.
Source: https://github.com/gardener/gardener-extension-provider-aws/releases/tag/v1.64.0, https://github.com/gardener/gardener-extension-provider-aws/security/advisories/GHSA-227x-7mh8-3cf6, https://github.com/gardener/gardener-extension-provider-azure/releases/tag/v1.55.0, https://github.com/gardener/gardener-extension-provider-gcp/releases/tag/v1.46.0, https://github.com/gardener/gardener-extension-provider-openstack/releases/tag/v1.49.0
Actions:
Summary: Argo CD 1.2.0–1.8.7, 2.0.0-rc1–2.14.19, 3.0.0-rc1–3.2.0-rc1, 3.1.7, 3.0.18: unauthenticated DoS via malformed Bitbucket Server webhook payload (non-array `repository.links.clone`). A single request crashes the API server (CrashLoopBackOff); targeting all replicas causes full API outage. Fixed in 2.14.20, 3.2.0-rc2, 3.1.8, 3.0.19.
Affected Features / Interoperability: Argo CD `/api/webhook` endpoint (Bitbucket Server integration). Downstream: GitOps pipeline halt, application sync failures, cluster management disruption.
Source: https://github.com/argoproj/argo-cd/commit/5c466a4e39802e059e75c0008ae7b7b8e842538f, https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc
Actions:
Summary: Argo CD same versions as above: unauthenticated DoS via Gogs webhook with missing/null `commits[].repo` field. Crashes `argocd-server` process; single request kills replica. Fixed in same versions as CVE-2025-59531.
Affected Features / Interoperability: Argo CD `/api/webhook` endpoint (Gogs integration). Same downstream impact as CVE-2025-59531.
Source: https://github.com/argoproj/argo-cd/commit/761fc27068d2d4cd24e1f784eb2a9033b5ee7f43, https://github.com/argoproj/argo-cd/security/advisories/GHSA-wp4p-9pxh-cgx2
Actions:
Summary: Argo CD 2.9.0-rc1–2.14.19, 3.0.0-rc1–3.2.0-rc1, 3.1.6, 3.0.17: unauthenticated DoS via Azure DevOps webhook with empty `resource.refUpdates` array. Index-out-of-range panic crashes `argocd-server`. Fixed in same versions as above.
Affected Features / Interoperability: Argo CD `/api/webhook` endpoint (Azure DevOps integration). Same downstream impact.
Source: https://github.com/argoproj/argo-cd/commit/1a023f1ca7fe4ec942b4b6696804988d5a632baf, https://github.com/argoproj/argo-cd/security/advisories/GHSA-gpx4-37g2-c8pv
Actions:
Summary: KEDA <2.20.0: PostgreSQL scaler builds libpq connection strings from tenant-controlled fields (host, port, userName, dbName, sslmode, password) with insufficient escaping (only spaces quoted). Tabs, newlines, quotes, backslashes inject extra key-value tokens, allowing an attacker who can create/modify TriggerAuthentication or ScaledObject to redirect DB connections, leak credentials, or disable TLS.
Affected Features / Interoperability: KEDA PostgreSQL scaler (`pkg/scalers/postgresql_scaler.go`). Downstream: credential exposure, TLS bypass, connection hijacking to attacker-controlled DB.
Source: https://github.com/kedacore/keda/commit/703de9dec86cb25b6ecfa4948880a90487344d3f, https://github.com/kedacore/keda/issues/7784, https://github.com/kedacore/keda/pull/7787, https://github.com/kedacore/keda/releases/tag/v2.20.0, https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q
Actions:
Summary: Kite dashboard <0.12.3: authenticated users with any role can request `/api/v1/overview` for unauthorized clusters via `x-cluster-name` header. The overview route runs before RBAC middleware and only checks `len(user.Roles) > 0`, leaking aggregate inventory/capacity data.
Affected Features / Interoperability: Kite `/api/v1/overview` endpoint; multi-cluster RBAC enforcement. Downstream: cross-cluster information disclosure (resource counts, capacity metrics).
Source: https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8
Actions:
Summary: Termix ≤1.5.0 official Docker image: Nginx reverse proxy causes backend to see proxy IP as client IP, making `isLocalhost` always true. This exposes `/ssh/db/host/internal` (stored SSH hosts, usernames, passwords) without authentication. Affects users of the official image, custom builds from the official Dockerfile, or reverse-proxy setups. Fixed in 1.6.0.
Affected Features / Interoperability: Termix SSH host database endpoint (`/ssh/db/host/internal`); Nginx reverse-proxy IP forwarding. Downstream: full SSH credential dump, lateral movement to managed servers.
Source: https://github.com/LukeGus/Termix/pull/221, https://github.com/LukeGus/Termix/security/advisories/GHSA-92cw-877q-6r94
Actions:
Summary: Blinko ≤1.8.8: directory traversal in `installPlugin` (unsanitized plugin name with `../` sequences) allows authenticated users to overwrite root-owned startup files. Official Docker image runs as root → RCE as root. Self-registration may be open.
Affected Features / Interoperability: Blinko plugin installation (`server/routerTrpc/plugin.ts`); Docker root user. Downstream: container escape to host via overwritten startup scripts, full RCE.
Source: https://github.com/blinkospace/blinko/blob/178e4b3538a21823a50ac2481e653d56cb1ffa86/app/src/pages/signin.tsx#L238-L243, https://github.com/blinkospace/blinko/blob/178e4b3538a21823a50ac2481e653d56cb1ffa86/server/routerTrpc/plugin.ts#L273, https://github.com/kashishtopi/blinko-plugin-path-traversal-rce
Actions:
Summary: docker-socket-proxy (Tecnativa) fails to gate read endpoints in `/containers` namespace when `CONTAINERS` env var is set. Attackers with proxy access can GET `/containers/{id}/archive`, `/export`, `/logs`, `/top` to read arbitrary files and download entire container filesystems as tar.
Affected Features / Interoperability: docker-socket-proxy HAProxy config (`haproxy.cfg` lines 49–61); Docker API `/containers` read endpoints. Downstream: container filesystem exfiltration, log/secret leakage.
Source: https://gist.github.com/nedlir/e4f52f88a757f02c67db1fd5dd70d732, https://github.com/Tecnativa/docker-socket-proxy, https://github.com/Tecnativa/docker-socket-proxy/blob/v0.5.0/haproxy.cfg#L49-L61, https://github.com/Tecnativa/docker-socket-proxy/issues/182, https://github.com/Tecnativa/docker-socket-proxy/pull/183
Actions:
Summary: Buildah 1.38.1–1.43.2 and 1.44.0: `TempDirForURL` does not confine Git subdirectories to build context; `downloadToDirectory` and `stdinToDirectory` can follow Dockerfile symlinks from partially extracted tar. Malicious Git/tar source can include files outside build context or copy them into the image.
Affected Features / Interoperability: Buildah build context handling (`define/types.go`); Git/tar source fetching. Downstream: supply-chain contamination, unintended file inclusion in built images.
Source: https://github.com/podman-container-tools/buildah/commit/54459cf8a0feb4b1da766e4a6360451834e1846c, https://github.com/podman-container-tools/buildah/commit/fc2003bb2efeb3ed7d5c7e1e88d04e78f370a944, https://github.com/podman-container-tools/buildah/releases/tag/v1.43.2, https://github.com/podman-container-tools/buildah/releases/tag/v1.44.0, https://github.com/podman-container-tools/buildah/security/advisories/GHSA-49p4-px3h-rq49
Actions:
Summary: Crawl4AI <0.9.4: blind SSRF in `RobotsParser.can_fetch` via `check_robots_txt` option. Unauthenticated attackers use redirects or DNS rebinding to reach internal/loopback/cloud-metadata addresses, bypassing Docker egress controls.
Affected Features / Interoperability: Crawl4AI robots.txt parser; container egress filtering. Downstream: internal service discovery, cloud metadata exposure (IAM credentials, instance identity).
Source: https://github.com/unclecode/crawl4ai/security/advisories/GHSA-f77g-77vp-r96v, https://www.vulncheck.com/advisories/crawl4ai-before-0.9.4-blind-ssrf-via-robotsparser-can-fetch-robots-txt-fetch
Actions:
Summary: Same as Kubernetes entry above: Gardener Extension providers (AWS, Azure, GCP, OpenStack) code injection via Terraformer, allowing project admin to take over seed cluster. Listed under Terraform because Terraformer is the Terraform-based provisioning component.
Affected Features / Interoperability: Gardener Terraformer integration with cloud-provider extensions. Downstream: seed-cluster compromise, all shoot clusters affected.
Source: https://github.com/gardener/gardener-extension-provider-aws/releases/tag/v1.64.0, https://github.com/gardener/gardener-extension-provider-aws/security/advisories/GHSA-227x-7mh8-3cf6, https://github.com/gardener/gardener-extension-provider-azure/releases/tag/v1.55.0, https://github.com/gardener/gardener-extension-provider-gcp/releases/tag/v1.46.0, https://github.com/gardener/gardener-extension-provider-openstack/releases/tag/v1.49.0
Actions:
Summary: Atlantis 0.19.8–0.45.0: inconsistent validation of user-controlled workspace values from `atlantis.yaml` or `/api/plan` input. Path traversal escapes per-pull workspace directory, causing `os.RemoveAll`/`os.MkdirAll` on out-of-bounds paths before Terraform rejects the name. Integrity loss or DoS with Atlantis process privileges. Fixed in 0.45.0.
Affected Features / Interoperability: Atlantis workspace handling (repo-level `atlantis.yaml`, `/api/plan` endpoint). Downstream: arbitrary filesystem read/write/delete on Atlantis host, CI/CD disruption, potential host compromise.
Source: https://github.com/runatlantis/atlantis/commit/ea4e4ceebf8b387d015fff7ed8a7fcca33279afe, https://github.com/runatlantis/atlantis/pull/6254, https://github.com/runatlantis/atlantis/releases/tag/v0.45.0, https://github.com/runatlantis/atlantis/security/advisories/GHSA-26w5-6g95-gj28
Actions:
Summary: Terragrunt <1.0.4: trusts paths from downloaded module's `.terragrunt-module-manifest` during `fileManifest.Clean()`. Malicious/compromised module can place absolute/traversal paths, causing cleanup to delete files outside module cache accessible to Terragrunt process. Deletion-only primitive disrupts CI/CD and local source. Fixed in 1.0.4.
Affected Features / Interoperability: Terragrunt module cache cleanup (`internal/util/file.go`); external module fetching. Downstream: arbitrary file deletion on Terragrunt host, pipeline breakage, potential data loss.
Source: https://github.com/gruntwork-io/terragrunt/commit/3d6f10d6bccc851c6506a307a0b8675e0346e65e, https://github.com/gruntwork-io/terragrunt/pull/6032, https://github.com/gruntwork-io/terragrunt/releases/tag/v1.0.4, https://github.com/gruntwork-io/terragrunt/security/advisories/GHSA-8394-6f8r-whxg
Actions:
Unverified chatter — not authoritative vulnerability data.
AWS
Microsoft Azure
Kubernetes