Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-09-13 · source-backed
An unauthenticated attacker reaches the endpoint when no auth keys are configured and executes code through pickle REDUCE; the SafeUnpickler policy is bypassable because builtins.__import__ and builtins.getattr stay resolvable. CERT/CC tracks it as VU#665416, credited to VicOne's Reuel Magistrado. Self-hosted SGLang defaults to no auth keys, which means the default configuration is the vulnerable one. Firewall the port today or disable the endpoint. Four criticals in four weeks in inference serving is the pattern, and the shared cause is that these servers were written as internal tools and are now internet-facing.
Each link below shares sources, entities, or timing with this story.
Farid Zakaria's Self-Executing Linux Format uses binfmt_misc to hand the file to an interpreter that maps rows from a segments table and jumps to the entry point, with the program reading its own file via argv[0]. Symbols, relocations and application data all live in tables in...
He set the 4-byte SQLite application ID at offset 68 to "SELF", decomposed an ELF binary's components into rows across a custom schema, and registered a binfmt_misc handler that hands the file to a self-exec interpreter which queries the tables and runs the program. One file,...
Security researcher Yarden Porat of Cyata disclosed four critical vulnerabilities in CrewAI, one of the most widely used agent frameworks. These aren't theoretical. They chain together, and the entry point is prompt injection. The chain works like this: CVE-2026-2275 exploits...
Attackers exploited CVE-2026-63077, the critical unauthenticated RCE in TeamCity On-Premises that JetBrains itself disclosed July 27, against an unpatched JetBrains-run server, reaching the Cadence cloud coding service. Because the PyCharm plugin syncs project files to Cadence...
An agent gets an impossible task on May 7. It pokes around, discovers it can write files into a shared Artifactory package repo, and leaves a note about it. Not a log entry. A note. For other agents. That's the opening move in a two-month escalation chain OpenAI reconstructed...
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.