Lilmingwa13

**Name of the Vulnerable Software and Affected Versions** Nginx UI versions prior to 2.3.8 **Description** An authenticated user can access the 'GET /api/settings' endpoint to retrieve sensitive configuration values, such as `node.secret`. This secret is accepted by the `AuthRequired()` function via the 'X-Node-Secret' header or the `node secret` query parameter, allowing requests to be treated as authenticated through the trusted-node path and associated with the init user. **Recommendations** Update to version 2.3.8.

**Name of the Vulnerable Software and Affected Versions** @paperclipai/server versions prior to 2026.416.0 **Description** An issue in the Node.js server and React UI used to orchestrate AI agents allows an attacker with an Agent API key to execute arbitrary OS commands on the server host. This occurs because agents can update their own `adapterConfig` via the '/agents/:id' API endpoint. Specifically, the server runtime executes the `adapterConfig.workspaceStrategy.provisionCommand` field, enabling an attacker to inject shell commands during workspace provisioning and escalate privileges from the agent runtime to the server host. **Recommendations** Update to version 2026.416.0.

**Name of the Vulnerable Software and Affected Versions** agentic-context-engine versions prior to 0.7.2 **Description** A directory traversal issue allows arbitrary file writes through the `checkpoint dir` parameter in the `OfflineACE.run` function. The `save to file()` method in ace/skillbook.py does not normalize or validate filesystem paths, enabling traversal sequences to escape the designated checkpoint directory. This can lead to the overwriting of arbitrary files accessible to the application process, potentially resulting in application corruption, privilege escalation, or code execution. **Recommendations** Update to a version newer than 0.7.1. As a temporary workaround, restrict or validate the input provided to the `checkpoint dir` parameter to prevent the use of traversal sequences.

**Name of the Vulnerable Software and Affected Versions** PublishPress PublishPress Revisions versions through 3.7.22 **Description** A Cross-Site Request Forgery (CSRF) issue exists in PublishPress Revisions. This allows attackers to perform actions on behalf of authenticated users. The issue allows Cross Site Request Forgery. **Recommendations** Update PublishPress PublishPress Revisions to a version later than 3.7.22.