Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:23:24 +0000 CVE-2026-88939 — knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption https://cve.radiocsirt.org/vuln/cve-2026-88939 <p><strong>Affected:</strong> knowns-dev knowns</p> <p>knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities.</p> <p><strong>Affected:</strong> knowns-dev knowns</p> <p>knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities.</p> https://cve.radiocsirt.org/vuln/cve-2026-88939