CWE-284 Improper Access Control

Backstage: Improper access control in backend action invocation

mise permits untrusted local configuration to override default shell arguments

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Backstage: Scaffolder action input authorization bypass

Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token

Payload didn't enforce field-level password update restrictions

NLTK downloader allows cross-package resource and model poisoning

Anubis: Policy bypass via client controlled X-Original-URI header

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process

OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet

ZITADEL: Actions V1 sandbox escape: host file read via require()

Gitea SSH Key Parser Denial of Service

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass

Nuclei: Local File Read via MySQL Client Sandbox Bypass

ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests

October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls

NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability

Withdrawn Advisory: Open WebUI Access Control

Duplicate Advisory: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

Gitea draft releases and attachments are exposed without write permission

Gitea forwarded-proto validation allows canonical URL spoofing