CVE
n8n Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
Artemiy Malyshau3 minute readNews, Research, and more from Gecko
Artemiy Malyshau3 minute readCVE
CVE-2026-42227: n8n Public API Variables IDOR Allows Cross-Project Secret Disclosure
Artemiy Malyshau2 minute readCVE
CVE-2026-21894: n8n Missing Stripe-Signature Verification Allows Forged Webhooks
Artemiy Malyshau3 minute readCVE
CVE-2026-25055: n8n Arbitrary File Write on Remote Systems via SSH Node
Artemiy Malyshau2 minute readCVE
CVE-2025-54381: BentoML SSRF in File Upload Processing
Artemiy Malyshau2 minute readCVE
CVE-2025-53944: AutoGPT Authorization Bypass in Graph Execution External API
Artemiy Malyshau2 minute readCVE
CVE-2025-48889: Gradio Unauthorized File Copy via Path Manipulation
Artemiy Malyshau2 minute readCVE
CVE-2025-51471: Ollama Cross-Domain Authentication Token Exposure
Artemiy Malyshau1 minute readCVE
CVE-2025-51479: ONYX Authorization Bypass in Enterprise Edition Group Management API
Artemiy Malyshau2 minute readCVE
CVE-2025-51481: Dagster LFI in gRPC Server's ExternalNotebookData Endpoint
Artemiy Malyshau2 minute readCVE
CVE-2025-51482: Letta RCE via Unsanitized Tool Execution Endpoint
Artemiy Malyshau1 minute readCVE
CVE-2025-51464: Stored XSS in AIM Reports
Artemiy Malyshau1 minute readCVE
CVE-2025-51480: ONNX Arbitrary File Overwrite in save_external_data
Artemiy Malyshau1 minute readCVE
CVE-2025-51458: DB-GPT SQLI via CVE Bypass (CVE-2024-10835 & CVE-2024-10901)
Artemiy Malyshau1 minute readCVE
CVE-2025-51459: DB-GPT RCE in DB-GPT Plugin Upload System
Artemiy Malyshau1 minute readCVE
CVE-2025-51462: Ragflow XSS in Dialog Configuration
Artemiy Malyshau1 minute readCVE
CVE-2025-51463: Aim Path Traversal in Server Backup Restoration
Artemiy Malyshau1 minute readCVE
CVE-2025-51472: SuperAGI RCE via Unsafe Eval in Template Config
Artemiy Malyshau1 minute readCVE
CVE-2025-51475: SuperAGI AFO in File Upload Endpoint
Artemiy Malyshau1 minute read