New vulnerabilities – clearly explained

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

ServiceNow AI Platform: Sandbox escape in Rhino sandbox

ServiceNow AI Platform contains a sandbox escape in the Rhino sandbox. An authenticated user with the admin role can bypass the sandbox restrictions and execute arbitrary code on the underlying host operating system, which may enable further unintended access. Exploitation requires a valid admin session, not anonymous internet access. ServiceNow has deployed the fix to hosted instances and provided it to partners and self-hosted customers.

ServiceNow · AI Platform

Research and translation in progress – available shortly.

SuperAGI: Incorrect access control in agent execution configuration endpoint

SuperAGI v0.0.14 does not check whether an agent and an agent execution belong to the requesting user's organization in the endpoint that returns agent execution configurations. An authenticated user from one organization can read another organization's configuration by supplying the agent_id and agent_execution_id of the victim. The reporter states that the configuration can contain sensitive data such as API keys and prompts, but this has not been verified. The attack requires a valid account on the same SuperAGI instance.

TransformerOptimus · SuperAGI

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Botan: Integer overflow in FFI block size reporting can cause memory corruption

The Botan cryptography library reports the block size of a block cipher through its C API without checking for overflow when converting to int. An application that accepts external algorithm parameter strings and uses the FFI raw ECB mode can be tricked by an attacker into selecting the variable-block-size Lion cipher, leading to truncated size reporting, insufficient buffer allocation and memory corruption. The C++ API and commonly used C API modes such as CBC and CTR are not affected.

Botan Project · Botan

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Nomad: Symlink following allows writes outside the allocation directory

HashiCorp Nomad and Nomad Enterprise follow symbolic links when writing dispatch payloads and executor logs. A user with job submission rights can use a malicious workload to create, overwrite or append to files outside the allocation directory. If the Nomad client agent runs as root, this can lead to code execution as root on the client host.

HashiCorp · Nomad

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

AWS Private CA Connector for Kubernetes: Incorrect authorization in issuer resolution

The issuer resolution logic in the AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 does not correctly enforce authorization. An authenticated user whose approval policy only permits a namespace-scoped issuer may obtain certificates, including subordinate CA certificates, signed by a cluster-scoped AWS Private CA issuer they are not authorized to use. The attack requires valid cluster credentials and low privileges.

Amazon Web Services · AWS Private CA Connector for Kubernetes