Kuniyoshi Noguchi

**Name of the Vulnerable Software and Affected Versions** Splunk MCP Server app versions prior to 1.2.1 **Description** Users with the admin Splunk role can execute arbitrary commands on the underlying operating system. This occurs due to missing input validation within the credential management component, which performs deserialization—the process of converting stored data back into an object—without verifying if the content matches the expected type. **Recommendations** Update Splunk MCP Server app to version 1.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apache Struts versions 2.0.0 through 2.3.37 Apache Struts versions 2.5.0 through 2.5.33 Apache Struts versions 6.0.0 through 6.10.0 Apache Struts versions 7.0.0 through 7.2.1 **Description** An unauthenticated remote client can cause the internal localized-text caches to grow without bound and exhaust the Java heap, leading to a denial of service. This occurs when no fixed locale is configured, as the framework takes the locale used for localized-text lookups directly from the incoming request. **Recommendations** Upgrade versions 2.0.0 through 2.3.37, 2.5.0 through 2.5.33, and 6.0.0 through 6.10.0 to version 6.11.0. Upgrade versions 7.0.0 through 7.2.1 to version 7.3.0. Configure a fixed locale to prevent the framework from using the locale provided in the incoming request.

**Name of the Vulnerable Software and Affected Versions** Drupal OpenAI Provider versions 0.0.0 through 1.1.1 Drupal OpenAI Provider versions 1.2.0 through 1.2.2 **Description** Insufficient sanitization of user-supplied URLs leads to a Server-Side Request Forgery (SSRF), a flaw where an attacker can induce the server to make requests to an unintended location. Exploitation requires the attacker to have permissions to modify the host URL and the ability to generate AI-generated images. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Drupal AI versions 0.0.0 through 1.2.17 Drupal AI versions 1.3.0 through 1.3.8 Drupal AI versions 1.4.0 through 1.4.3 **Description** A missing authorization issue allows forceful browsing. Certain Drupal core actions exposed as agent tools lack correct access validation, and some core actions are missing associated access-level definitions. This allows an agent to utilize Drupal core actions tools by bypassing access controls, provided the attacker can communicate with the affected agent and the site is configured to expose these tools to non-privileged users. **Recommendations** Update Drupal AI versions 0.0.0 through 1.2.17 to a version newer than 1.2.17. Update Drupal AI versions 1.3.0 through 1.3.8 to a version newer than 1.3.8. Update Drupal AI versions 1.4.0 through 1.4.3 to a version newer than 1.4.3.

**Name of the Vulnerable Software and Affected Versions** Drupal AI Agents versions 0.0.0 through 1.1.4 Drupal AI Agents versions 1.2.0 through 1.2.5 Drupal AI Agents versions 1.3.0 through 1.3.1 **Description** Missing authorization allows forceful browsing within the module that provides the entity type and runtime for agents to use tools. The issue occurs because the module does not sufficiently check required permissions when a tool loads content entities. Exploitation requires that an agent be configured to use the affected tool and that the attacker has access to that agent. **Recommendations** Update Drupal AI Agents versions 0.0.0 through 1.1.4 to a version newer than 1.1.4. Update Drupal AI Agents versions 1.2.0 through 1.2.5 to a version newer than 1.2.5. Update Drupal AI Agents versions 1.3.0 through 1.3.1 to a version newer than 1.3.1.