IBM Langflow OSS 1.0.0–1.12.8 is affected by improper authentication (CVE-2026-93680) that lets remote attackers bypass security restrictions, and improper control of code generation (CVE-2026-110186) enabling arbitrary code execution. Network-exploitable with no privileges. Both are network-exploitable with no privileges, and a public Metasploit module already targets CVE-2026-93680. Upgrade to >=1.13.0 to mitigate.

Ivanti Connect Secure mishandles how the dsinvoked broker trusts DSCache configuration data, enabling a local authenticated attacker with low privileges to escalate to root. Exploited in the wild (Oct 2026) and listed in CISA KEV. Affected: 22.8R2.4 (also reported in 22.8R2.5 and prior, 25.1.1.2 and prior). Upgrade to 22.8R2.6 or 25.1.1.3 to mitigate.

Two util-linux flaws. CVE-2026-78408: nsenter –join-cgroup leaks a root-opened cgroup.procs FD across execve(), letting attacker code move host processes between cgroups and kill unrelated root processes. CVE-2026-78410: a TOCTOU in restricted bind mounts lets a local user redirect the SUID mount(8) bind to another host directory, where root may apply X-mount.owner/group/mode. Upgrade util-linux to a fixed version (e.g., RHEL10 0:2.40.2-18.el10_2.20) to mitigate.

Langchain-Chatchat exposes unauthenticated POST /tools/call that invokes any registered tool by name; the always-registered shell tool can be called remotely to run arbitrary OS commands. Affects langchain-chatchat `

CVE-2026-103093: authenticated admin can bypass Rhino sandbox restrictions in ServiceNow AI Platform to execute arbitrary code on the underlying host OS (sandbox escape). CVE-2026-103094: plaintext user passwords may be persisted in a system table, enabling credential disclosure to unintended users. Affects releases before specified patches/hotfixes; apply ServiceNow security updates/upgrade to patched releases to mitigate.

AJ-Report `