CVE-2026-114108

HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require_auth() returns early when API_AUTH_KEY is unset. Attackers can post messages to /sessions/{id}/messages to trigger root shell commands via BashTool, upload .py or .sh files via /upload, read session histories, and obtain partial API keys.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Hkuds

Products

Vibe-trading

CVE-2026-114103

adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync()

adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard by targeting the asynchronous getDataAsync() path in methods/inflater.js. Attackers can craft ZIP entries with falsified small declared sizes and high-ratio DEFLATE payloads to exhaust memory in applications reading entries asynchronously.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Adm-zip Project Cthackers

Products

Adm-zip Adm-zip

CVE-2026-114098

Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks

Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files outside the worktree through intermediate directory symlinks. Attackers can craft a malicious repository whose popped stash writes a payload into .git/hooks/post-checkout, achieving code execution on the next checkout.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Dulwich Project Jelmer

Products

Dulwich Dulwich

CVE-2026-114093

Trigger.dev before 4.5.6 Cross-Site Request Forgery via /logout Endpoint

Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout endpoint. Attackers can lure victims into clicking an obfuscated, URL-encoded link that terminates their session, causing loss of unsaved work.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-114088

Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO

Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticated attackers to connect using the published coordinator-secret value. Attackers can emit READY_FOR_EXECUTION to retrieve decrypted run environment variables or send TASK_RUN_FAILED_TO_RUN and similar events to tamper with arbitrary runs.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-114083

Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints

Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to escape their object key prefix through an unsanitized filename splat segment. Attackers holding one valid API key can supply ../ sequences to obtain presigned GET or PUT URLs and read or overwrite other tenants' run payloads and outputs.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-114078

Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup

Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that allows authenticated users to delete or disable other organizations' schedules. Attackers can send delete or disable actions through their own project's schedule route with a victim schedule friendlyId to destroy other organizations' IMPERATIVE cron schedules.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-114073

Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs

Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted envVars. Attackers with access to terminal transcripts, CI debug logs, or support bundles can read the Starting buildWorker record to recover database connection strings and service credentials.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-114068

Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint

Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs belonging to other organizations. Attackers holding any secret API key can supply a victim run ID with their own waitpoint, causing that run to block indefinitely on a waitpoint the victim cannot complete, and can inject resume data into it.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Triggerdotdev

Products

Trigger.dev

CVE-2026-114063

SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows

SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a tunnel can send crafted requests to expose source code, configuration, or credentials readable by the server process.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Svelte

Products

Kit

CVE-2026-114058

ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metadata. Attackers with credentials for one database can set the db field in RUN or BEGIN messages and call db.labels() or SHOW INDEXES to enumerate unauthorized schemas.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Arcadedata

Products

Arcadedb

CVE-2026-114053

vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision

vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is imported when trust_remote_code is enabled. An attacker controlling a revision in the served model repository can send a multimodal request to the unauthenticated /tokenize endpoint to execute arbitrary Python in the vLLM API process.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Vllm Vllm-project

Products

Vllm Vllm

CVE-2026-114048

WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints

WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to make private playlists public, remove playlist videos, or forge video suggestions.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Wwbn

Products

Avideo

CVE-2026-114043

Vulnerability in FreeRDP

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr_bitmap_write_buffer() copies rows assuming one byte per pixel. A malicious RDP server can send a crafted low-bit-depth PNG clipboard payload that, when pasted by the victim, discloses megabytes of heap memory.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Freerdp

Products

Freerdp

CVE-2026-113743

Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.81.0-dev20261016 is sufficient to fix this issue. Patch name: 4851ccf347f6903c3d819eed60705600386e52c3. It is suggested to upgrade the affected component.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Tenstorrent

Products

Tt-metal

CVE-2026-113737

R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validate_indexed_tensors of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py. Executing a manipulation of the argument weight_map can lead to path traversal. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

R6410418

Products

Jackrong-llm-finetuning-guide

CVE-2026-113726

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASH_VERSION is set, so zsh receives the raw value. The script assigns that value to PS1. In zsh with PROMPT_SUBST, an attacker-influenced environment directory, --prompt, or VIRTUALENV_PROMPT value containing command, parameter, or arithmetic expansion syntax can therefore execute commands in the user's shell each time the prompt is drawn. A percent sign is separately interpreted as a zsh prompt escape but does not by itself execute commands. Plain zsh with PROMPT_SUBST disabled and bash are not affected by this mechanism. This issue is fixed in version 21.14.4.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Pypa

Products

Virtualenv

CVE-2026-113706

a2aproject a2a-rs inmemory.rs information disclosure

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of the patch is 68f1b7e772ae5d6c9e581ac9b48bcddd10fe70eb. To fix this issue, it is recommended to deploy a patch.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

A2aproject

Products

A2a-rs

CVE-2021-48019

Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxies

Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-byte RETURNDATASIZE rather than the actual return data size. Calls through these proxies can yield corrupted data when a function returns more than 4096 bytes without return data sanitation, and fail strict return-size checks such as SafeERC20.safeTransfer.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Vyperlang

Products

Vyper

CVE-2020-37286

Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls

Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls appear inside tuples or nested calls. Contracts using such calls as tuple elements, call arguments, or builtin arguments like concat or ecrecover can return corrupted values or pass wrong arguments to external calls.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Vyperlang

Products

Vyper