Loading story…
Several server and developer administration tools have disclosed severe code-execution vulnerabilities affecting exposed management functionality. Termix reported an authenticated OS command injection in GET /ssh/file_manager/ssh/resolvePath, where double-quoted user input allowed shell substitution via $(...) and backticks, enabling arbitrary commands on the connected remote host under the active SSH account. A separate Termix issue, tracked as CVE-2026-45746, affected versions prior to 2.3.2 and allowed attackers to tamper with a client-controlled sessionId to access other users' active File Manager SSH sessions, potentially leading to unauthorized file operations and remote code execution on another user's VPS.
Other disclosures showed similar high-impact flaws in JavaScript-based backends. DbGate fixed an RCE in v7.1.9 after researchers found that POST /runners/start and POST /runners/load-reader concatenated attacker-controlled values into generated JavaScript executed by a forked Node.js process; in anonymous-auth deployments, the issue could permit unauthenticated RCE. BrowserStack Runner through 0.9.5 was assigned CVE-2026-49143 for an unauthenticated RCE in the /_log handler, where crafted JSON passed through vm.runInNewContext() and eval() allowed attackers to escape the sandbox and invoke child_process on reachable runner instances.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
9 events from the most recent confirmed update back to the earliest known activity.
The CVE-2026-45746 record states that a Broken Access Control issue in Termix File Manager affecting versions prior to 2.3.2 was fixed in version 2.3.2.
A follow-up report described exploitation of CVE-2026-49143 using a crafted JSON payload that escapes scope, reaches the Node.js process object, and invokes child_process.execSync() to run OS commands.
CVE-2026-49143 was disclosed for BrowserStack Runner through version 0.9.5, describing unauthenticated remote code execution via crafted JSON passed to vm.runInNewContext() and eval() in the /_log handler.
The CVE-2026-49143 record states it was received by disclosure@vulncheck.com on June 2, 2026, for an unauthenticated RCE in BrowserStack Runner's /_log HTTP handler.
A GitHub advisory disclosed an authenticated OS command injection vulnerability in Termix's GET /ssh/file_manager/ssh/resolvePath endpoint, demonstrated against v2.1.0 with proof-of-concept command execution on the connected remote host.
The DbGate advisory publicly disclosed an RCE flaw in the JSON script runner, warning that default anonymous-auth deployments could permit unauthenticated code execution.
The DbGate JSON script runner remote code execution issue was reportedly acknowledged by the project on 2026-04-24.
DbGate version 7.1.9 reportedly fixed the JSON script runner remote code execution vulnerability by 2026-04-22.
A remote code execution vulnerability in DbGate's JSON script runner was reportedly discovered, affecting the POST /runners/start and POST /runners/load-reader paths through unsafe interpolation into dynamically generated JavaScript.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvereports.com
Open sourcecvefeed.io
Open sourcegithub.com
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Several open source projects disclosed serious vulnerabilities affecting developer and infrastructure tooling, including remote code execution, SQL injection, server-side request forgery, prompt-driven query injection, and path traversal. **Coder Workspace Agent** patched `GHSA-QRWJ-VH9X-GW5V`, a cross-agent SSRF flaw that let an authenticated attacker controlling one workspace agent abuse HTTP `307`/`308` redirects to replay privileged requests to another agent, enabling cross-tenant file access, file writes, and command execution; fixes were released in versions `v2.34.4`, `v2.33.10`, `v2.32.9`, and `v2.29.19 ESR`. **Coolify** disclosed a critical authenticated command injection issue tied to unsafe handling of deployment fields such as `dockerfile_location`, allowing RCE and secrets exposure through deployment logs, while **OpenRemote** fixed `GHSA-cgfv-jrfp-2r7v`, an authenticated SQL injection bug in datapoint crosstab export that could expose other tenants’ data, Keycloak configuration, and encrypted credentials. Additional disclosures affected AI and package-management components. **Langroid** fixed a prompt-injection-driven flaw in `Neo4jChatAgent` that executed LLM-generated Cypher without validation, allowing unauthorized graph operations and possible OS-level impact when dangerous Neo4j procedures were enabled; the issue was resolved in version `0.65.5` with new safety controls that were also extended to `ArangoChatAgent`. **pnpm** also reported a path traversal weakness in `configDependencies` processing from `pnpm-lock.yaml`, where a malicious repository could force symlink creation outside `node_modules/.pnpm-config` even with `--ignore-scripts`, creating a filesystem write primitive within or potentially beyond the project directory.
Jul 8, 2026
Two critical vulnerabilities were disclosed that allow **unauthenticated remote code execution** against exposed systems. `CVE-2024-40711` affects **Veeam Backup & Recovery** and stems from **deserialization of untrusted data**, enabling remote compromise when an attacker can deliver a crafted payload to a vulnerable instance. The flaw puts backup infrastructure at particular risk because successful exploitation could give attackers direct access to systems designed to store and manage recovery data. A separate flaw, `GHSA-V6WJ-C83F-V46X`, impacts the `domain_lookup` module in **`@profullstack/mcp-server`** and is described as an **OS command injection** vulnerability with a **CVSS 9.8** rating. Exploitation allows attackers to execute commands with the privileges of the Node.js process, exposing source code, configuration files, environment variables, database credentials, and cryptographic keys, while also enabling persistence, malware deployment, service termination, and broader lateral movement. Together, the disclosures highlight continued risk from internet-exposed enterprise software and developer tooling that process untrusted input without adequate safeguards.
Jun 29, 2026
Researchers disclosed a broad set of critical flaws in the `vm2` Node.js sandbox library that allow untrusted JavaScript to break isolation and execute arbitrary code on the host system. Reports describe 11 to 12 vulnerabilities affecting versions across the `3.9.6` to `3.11.1` range, with most rated `CVSS 9.8` to `10.0`, and impacting core protections such as built-in allowlists, object handling, prototype traversal, Promise species behavior, `util.inspect`, `Module._load()`, WebAssembly exception handling, and unsafe `nesting: true` configurations. One tracked issue, **CVE-2026-24118**, is a sandbox breakout through `__lookupGetter__` in versions prior to `3.11.0`, enabling host-level command execution with no privileges or user interaction. The disclosures reinforce long-running concerns that `vm2`'s JavaScript-only isolation model is not dependable for high-risk use cases such as multi-tenant code execution, plugin evaluation, automated grading, and serverless workloads. While some reports recommend upgrading to **vm2 `3.11.2`** for the latest protections, others note that **CVE-2026-44008** and **CVE-2026-44009** remain unpatched and argue that organizations handling untrusted code should consider stronger isolation boundaries such as containers or microVMs. Successful exploitation could expose environment variables, credentials, and files, and enable full compromise of the underlying Node.js host and potential lateral movement.
Jun 29, 2026