All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
A vulnerability in the Linux kernel's f2fs (flash-friendly file system) allows inconsistent file system states because the function f2fs_need_dentry_mark() reads flag information without proper synchronization (locking mechanisms that prevent simultaneous access) with checkpoint operations. This can cause file system checking tools to detect that an inode (a data structure representing a file) has already been saved to disk but is marked with an inconsistent flag, which creates a logical contradiction.
Fix: This patch moves the set_dentry_mark() function call into __write_node_folio() and protects it with the sbi->node_write lock to ensure that flag updates happen with proper synchronization.
NVD/CVE DatabaseClaude Code version 2.1.181 and later now use Bun (a JavaScript runtime and toolkit) rewritten in Rust instead of the original JavaScript version, which improved startup speed by 10% on Linux. The article provides technical evidence that this Rust-based version is running in production across millions of devices, though most users didn't notice the change.
Anthropic announced that Claude Fable 5 (their most advanced AI model) will now be permanently included in Max and Team Premium subscription plans at 50% of normal usage limits, reversing an earlier plan to remove it from subscriptions. Pro and Team Standard users will keep access through usage credits and receive a one-time $100 credit, a decision driven by competition from other AI models like GPT-5.6 Sol.
The Trump administration is moving to control which companies and organizations can access frontier AI models (the most advanced AI systems available), a power previously held by tech companies like OpenAI and Anthropic. The administration has blocked some AI model releases citing national security concerns and established a new program called 'Gold Eagle' to review and approve AI model access, though it claims these decisions remain voluntary for companies.
PocketSphinx (a speech recognition library) versions up to 5prealpha have buffer overflow vulnerabilities (memory safety bugs where data overflows allocated memory boundaries) in code that reads language and acoustic model files. An attacker could exploit this by placing a malicious file in a directory specified by the POCKETSPHINX_PATH environment variable, especially if that directory is writable by untrusted users.
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.1 contain hard-coded credentials (passwords or encryption keys built directly into the code), which the software uses for its own authentication, communication with external systems, and data encryption. This vulnerability allows attackers to potentially gain unauthorized access or compromise the security of systems using these versions.
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.1 has a vulnerability where a logged-in attacker can misuse the SaveToFile component (a tool that saves data to files) to access and change files belonging to other users by using absolute paths (complete file addresses). The attacker can either read and copy other users' files to their own account (confidentiality breach, where private information is exposed) or overwrite those files with fake data (integrity breach, where data is corrupted or replaced).
IBM Langflow OSS versions 1.0.0 through 1.10.0 has a path traversal vulnerability (a flaw where an attacker can escape the intended directory using sequences like ../ to access other folders) in the "Save to File" feature. An attacker controlling an external server can trick the system into writing files to unintended locations by sending crafted filenames in HTTP response headers, potentially allowing them to overwrite or create files anywhere the Langflow application can access.
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.0 has a vulnerability where authenticated users (those with login access) can escalate privileges to superuser (gain the highest level of system access) by directly manipulating the database, potentially executing arbitrary system commands (running any code they want) and compromising the entire system. This is caused by improper control of code generation (code injection, where attackers inject malicious code into the system).
IBM Langflow OSS versions 1.0.0 through 1.10.0 have a vulnerability where webhook authentication can be bypassed when a configuration setting is disabled (which is the default), allowing attackers who know a flow's identifier to execute it and potentially run arbitrary code (RCE, or remote code execution). The system incorrectly skips checking API keys (credentials that verify a user's identity) when the WEBHOOK_AUTH_ENABLE setting is turned off.
IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability (RCE, where attackers can run commands on a system they don't own) in the code validation API endpoint. The vulnerable endpoint accepts and directly executes user-supplied Python code without any sandboxing (isolation from the rest of the system) or input validation, allowing authenticated users to run arbitrary system commands with full server privileges.
IBM Langflow OSS versions 1.0.0 through 1.10.0 have a critical vulnerability in their caching system that allows attackers to run arbitrary code on the server. The problem occurs because the software uses an unsafe deserialization method (pickle.loads(), which converts stored data back into Python objects without checking if it's trustworthy) to load cached data from disk, and attackers can exploit this by inserting malicious data through file access, workflow inputs, or API calls.
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.0 contains a critical security flaw in the `apply_tweaks()` function that allows authenticated users (those with login credentials) to override component parameters at runtime via the API (application programming interface, which lets software communicate with other software). This is a type of code injection vulnerability (where attackers insert malicious code by manipulating input that the system then executes).
CVE-2026-7872 is a vulnerability in IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.0 that allows an authenticated attacker (someone with login credentials) to read arbitrary files on the system, including the JWT signing key (a secret used to create authentication tokens). With access to this key, an attacker could forge authentication tokens to impersonate any user.
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.0 have a vulnerability that allows remote code execution (running malicious commands on a system from a distance) because the software doesn't properly validate MCP server configuration files (text files that tell the system how to connect to external services). This is a serious security flaw because an attacker could exploit incomplete validation enforcement to execute unauthorized code.
IBM Langflow OSS versions 1.0.0 through 1.10.0 and Langflow 1.9.0 contain a vulnerability that allows SSRF (server-side request forgery, where an attacker tricks a server into making requests to unintended targets) because of unsafe default settings and incomplete protection mechanisms against this type of attack. The vulnerability has a CVSS 4.0 severity rating, though a full assessment from NIST has not yet been provided.
IBM Langflow OSS (open-source software) versions 1.0.0 through 1.10.0 has a vulnerability where an authenticated attacker (someone with login access) can create a malicious flow pointing to a URL they control, which returns a specially crafted header that tricks the system into writing files to any location on the server. This works because the system doesn't properly validate file paths, allowing an attacker to use path traversal (using sequences like '../' to escape the intended directory) to write files anywhere the Langflow process can access.
IBM Cognos Analytics version 12.1.3 GA through build 12.1.3-2606251736 has a race condition (a bug that occurs when multiple processes access shared data simultaneously without proper protection), allowing attackers to get incorrect report summaries or cause report-processing failures when multiple authenticated users submit reports at the same time.
Author Dave Eggers told OpenAI staff that ChatGPT is harming educators and silencing a generation, criticizing the tool's impact on teachers' lives as catastrophic. Eggers, an accomplished writer and founder of literary organizations, spoke to approximately 200 OpenAI employees about concerns regarding how the AI system affects education and creative work.
Prompt injection attacks (malicious commands embedded in content to trick AI systems) have become a major threat, but researchers at Tracebit discovered a defensive technique called context bombing that uses forbidden prompts planted alongside secrets to trigger AI refusal mechanisms (safety barriers that stop harmful outputs). Testing across five leading AI models showed context bombing reduced successful attacks from 57% to 5% for admin access and from 91% to 15% for any attack path.
Fix: The source describes context bombing as a defensive technique: place prompt injections (forbidden commands that trigger refusal mechanisms) alongside passwords and cryptographic keys stored in cloud environments like Amazon Web Services. The researchers also mention a complementary detection method called canaries (dummy resources that look legitimate but serve no purpose), which alert defenders when AI agents probe them. According to the source, 'Tracebit Canariens, on average, alerted the start of an attack within eight minutes.'
Wired (Security)Fix: Update to PocketSphinx 5.1.1, which corrects the vulnerability. If updating is not immediately possible, ensure the POCKETSPHINX_PATH environment variable is either unset or points to a directory whose contents are trusted and cannot be written by untrusted users.
GitHub Advisory Database