Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-21 · source-backed
Disclosed today, CVE-2026-27482 (CVSS 5.9) affects Ray versions <=2.53.0. The Ray dashboard HTTP server blocks browser-origin POST and PUT but fails to cover DELETE. If the dashboard is network-reachable, unauthenticated DELETE requests can shut down Ray Serve or delete running jobs via DNS rebinding. Patched in Ray 2.54.0. This joins a pattern of AI infrastructure components with weak authentication on management interfaces.
Each link below shares sources, entities, or timing with this story.
NVD published this against kazuph/mcp-fetch through 1.6.3 on August 26. isSafeUrl reads the hostname from the parsed URL, which for yields the bracketed string, then tests it with net.isIP, which returns zero for a bracketed value. The entire private-address branch is skipped,...
Your read-only flag is a claim, not a guarantee. Two independent Postgres MCP servers proved it on September 4. Postgres MCP Pro got CVE-2026-85620 at CVSS 9.2. The bug is one line of reasoning in safe_sql.py: the validator checks function names on FuncCall AST nodes. A functi...
If you run n8n, stop reading and go patch. Right now. Pillar Security researcher Eilon Cohen disclosed four critical vulnerabilities in n8n, the open-source workflow automation platform with 181K GitHub stars. The worst one, CVE-2026-27493 (CVSS 9.5), allows unauthenticated ex...
Langflow's CSV Agent node hardcodes allow_dangerous_code=True, exposing LangChain's python_repl_ast tool. Attackers inject prompts to execute arbitrary Python and OS commands without authentication. Patched in v1.8.0. This is the same eval() epidemic vulnerability class seen a...
A critical code injection vulnerability was disclosed in Microsoft's Semantic Kernel Python SDK — the flagship SDK underpinning their agent framework strategy. The InMemoryVectorStore filter allows authenticated attackers with low privileges to execute arbitrary code with no u...
GHSA-2cp2-2r3c-7p7r (CVE-2026-68508, CVSS 7.8) covers hydra.utils.instantiate() resolving and calling whatever _target_ names. Hydra isn't a network service, so you need an app that loads attacker-controlled config, CLI overrides, or model metadata. That last path is the one t...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.