New vulnerabilities – clearly explained

VTK: Denial of service via invalid pointer dereference in PNG reader

The PNG reader (vtkPNGReader::vtkPNGReaderUpdate2) of the Visualization Toolkit (VTK) 9.6 contains an invalid pointer dereference. A specially crafted PNG file can crash the process, causing a denial of service. An attacker only needs to supply the malicious file to the application, without authentication or user interaction, if the application accepts untrusted PNG files.

Kitware · VTK

VTK: Denial of service via invalid pointer dereference in PNG reader

VTK 9.6 contains an invalid pointer dereference in vtkPNGReader::ExecuteInformation. A specially crafted PNG file can crash the process, causing a denial of service. The flaw is in error handling after a libpng longjmp, which can leave a dangling file pointer that is later passed to fclose(). The CVSS score of 7.5 reflects availability impact only, as the CNA rates it, but the NVD entry was still awaiting analysis at the time of writing.

Kitware · VTK

Research and translation in progress – available shortly.

WiFiman Desktop: Path manipulation allows command execution as root

A local attacker with low privileges can exploit an External Control of File Name or Path vulnerability in WiFiman Desktop to run arbitrary commands with root privileges on the host. The attacker must already have an account on the device, and internet exposure is not a factor. According to the CNA record, the macOS build is affected; the NVD entry was still awaiting analysis at the time of research.

Ubiquiti · WiFiman Desktop

Ubiquiti WiFiman Desktop: Information disclosure via binding to unrestricted IP address

WiFiman Desktop, a Wi-Fi diagnostic utility from Ubiquiti, binds to an unrestricted IP address. An attacker on the same network can exploit this to obtain information about the host device. The attack requires no authentication and no user interaction, but the impact is limited to confidentiality; remote code execution is not described.

Ubiquiti Inc · WiFiman Desktop

HashiCorp Nomad: Symlink following during allocation data migration

HashiCorp Nomad and Nomad Enterprise follow symbolic links during same-client allocation data migration. A workload that can submit or update jobs can plant a symlink in a task-local directory, which Nomad preserves and later follows when setting directory permissions and ownership. On clients running as root, this can change permissions and ownership of host directories outside the allocation, enabling unauthorized access to host data, modification of host files and possibly privilege escalation (CVSS 8.8).

HashiCorp · Nomad

Forge (node-forge): PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Forge (node-forge) is a JavaScript library implementing TLS and cryptography. Versions before 1.4.1 accept a PKCS#12 MAC or password-based encryption iteration count of zero, which makes the derived key a constant independent of the password and salt. An attacker can modify PKCS#12/PFX files or encrypted private keys and forge a valid MAC without knowing the password, so an application may accept an attacker's certificate and key. The attack requires no authentication, but only applies if the application parses such files from untrusted sources; confidentiality is not affected.

Digital Bazaar · Forge (node-forge)

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Forge: Denial of service via regular expressions in PEM decoding

Forge (node-forge) is a JavaScript implementation of Transport Layer Security. Its PEM parser uses regular expressions whose processing time grows polynomially with malformed input, so an unauthenticated attacker can block the Node.js event loop with a long crafted message. The issue affects applications that pass untrusted PEM data to node-forge, for example services that accept uploaded certificates or keys.

Digital Bazaar · Forge (node-forge)

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

joi: Denial of service via quadratic-time split in email multiple option

The joi validation library for Node.js is affected when the string().email({ multiple: true }) rule processes long runs of whitespace without a separator. An attacker who can submit a crafted value to such a field can cause one request to consume seconds of CPU time and block the Node.js event loop, which delays all other work in the application. The issue applies only where attacker-controlled input is validated with the multiple option and no effective length limit runs first; a .max() rule alone is not sufficient when abortEarly is set to false.

hapijs · joi

ServiceNow AI Platform: Cleartext storage of credentials in system table

A flaw in the ServiceNow AI Platform can cause a user's plaintext password, described by the CVE record as OAuth credentials, to be stored in a system table. A user who is not entitled to view the credential could read it there. The CVE record lists exposure as partial confidentiality impact, and CISA SSVC rates it as not automatable with no known exploitation.

ServiceNow · AI Platform

ServiceNow AI Platform: Sandbox escape in Rhino sandbox

ServiceNow AI Platform contains a sandbox escape in the Rhino sandbox. An authenticated user with the admin role can bypass the sandbox restrictions and execute arbitrary code on the underlying host operating system, which may enable further unintended access. Exploitation requires a valid admin session, not anonymous internet access. ServiceNow has deployed the fix to hosted instances and provided it to partners and self-hosted customers.

ServiceNow · AI Platform

OpenBMB XAgent: Directory traversal in ToolServer file upload

XAgent v1.0.0 contains a directory traversal vulnerability in the file upload handler of the ToolServer component (ToolServer/ToolServerNode/main.py). The CVSS 3.1 base score is 9.8 (critical), with network attack vector, low complexity, no privileges and no user interaction required. An attacker who can reach the ToolServer upload endpoint may be able to access or write files outside the intended directory, with high impact on confidentiality, integrity and availability.

OpenBMB · XAgent

SuperAGI: Incorrect access control in agent execution configuration endpoint

SuperAGI v0.0.14 does not check whether an agent and an agent execution belong to the requesting user's organization in the endpoint that returns agent execution configurations. An authenticated user from one organization can read another organization's configuration by supplying the agent_id and agent_execution_id of the victim. The reporter states that the configuration can contain sensitive data such as API keys and prompts, but this has not been verified. The attack requires a valid account on the same SuperAGI instance.

TransformerOptimus · SuperAGI

SuperAGI: Incorrect access control exposes other organisations' project data

SuperAGI v0.0.14 contains an improper access control flaw in the endpoint /agentexecutions/get/latest/agent/project/{project_id}. An authenticated user from one organisation can retrieve the latest execution and agent metadata of another organisation's project by supplying its project_id. The attack requires a valid account on the instance and network access to it, but no user interaction.

TransformerOptimus · SuperAGI

Research and translation in progress – available shortly.

DB-GPT: Directory traversal in example file handling

DB-GPT versions 0.7.5 and 0.8.0 contain a directory traversal flaw in the use_example_file function of the examples API. The target path is built from the example name without validation, so a name containing traversal sequences can cause files to be written outside the user upload directory. The reporter describes arbitrary file writes that could lead to configuration tampering or code execution, which is not verified. Exploitation depends on the example name being manipulated, for example through configuration or database changes, and the reporter says authenticated access is needed, which conflicts with the CVSS vector.

eosphoros-ai · DB-GPT

Agent Zero: Directory traversal in file browser save_text_file

Agent Zero versions 1.7 to 1.10 do not validate user-supplied file paths in the File Browser method save_text_file. An attacker who can reach the web interface can write files to arbitrary locations on the host, which can overwrite system or configuration files or plant executables. The CVE record rates this as High (CVSS 7.5) with no authentication required, but the vector is inconsistent with the method's write function and should be verified in the NVD record.

agent0ai · Agent Zero