https://vulnerability.circl.lu/sightings/feed 2026-09-17T20:38:39.450664+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/76b7a9c7-fa06-4fc7-b053-128d3934a47b/export 2026-09-17T20:38:39.458154+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "76b7a9c7-fa06-4fc7-b053-128d3934a47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57967", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvowqdfblk2b", "content": "\ud83d\udccc CVE-2026-57967 - An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the ... https://www.cyberhub.blog/cves/CVE-2026-57967", "creation_timestamp": "2026-09-17T05:37:06.860957Z"} 2026-09-17T05:37:06.860957+00:00 https://vulnerability.circl.lu/sighting/e633c16f-9296-4d26-ba3b-d0be1f631aa6/export 2026-09-17T20:38:39.459473+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e633c16f-9296-4d26-ba3b-d0be1f631aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57173", "type": "seen", "source": "https://gist.github.com/alon710/725c0a2c00f7edc1e74698f411f27baa", "content": "# CVE-2026-57173: CVE-2026-57173: Unauthenticated Audio Decompression-Bomb Denial of Service in vLLM\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-57173\n\n## Summary\nCVE-2026-57173 (GHSA-hcwq-8wjf-3gcr) represents a critical resource allocation validation vulnerability in the vLLM inference engine. Prior to version 0.24.0, vLLM's multimodal chat completions pipeline failed to enforce maximum audio decode duration limits. Unauthenticated remote attackers can exploit this to perform an audio decompression bomb attack, causing massive memory allocations that trigger immediate system Out-Of-Memory (OOM) crashes and service termination.\n\n## TL;DR\nvLLM versions prior to 0.24.0 are vulnerable to remote Denial of Service via an audio decompression bomb targeting the chat completions API, causing an immediate worker crash due to memory exhaustion.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 6.5\n- **EPSS Score**: Not Recorded\n- **Impact**: Endpoint Denial of Service (OOM Crash)\n- **Exploit Status**: Proof of Concept (PoC)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- vLLM installations serving audio-capable multimodal models\n- **vLLM**: < 0.24.0 (Fixed in: `0.24.0`)\n\n## Mitigation\n\n- Upgrade vLLM to version 0.24.0 or higher.\n- Limit the maximum request size on proxy or ingress layers to block large inline payload delivery.\n- Configure the VLLM_MAX_AUDIO_DECODE_DURATION_S environment variable to a minimal acceptable value.\n- Deploy API-level authentication to prevent external unauthenticated access to serving endpoints.\n\n**Remediation Steps:**\n1. Step 1: Terminate current vulnerable instances of vLLM.\n2. Step 2: Update the application environment to vLLM >= 0.24.0.\n3. Step 3: Define VLLM_MAX_AUDIO_DECODE_DURATION_S=300 in the runner's execution environment.\n4. Step 4: Restart the vLLM serving container and verify that API requests are processed within safety limits.\n\n## References\n\n- [GHSA-hcwq-8wjf-3gcr](https://github.com/vllm-project/vllm/security/advisories/GHSA-hcwq-8wjf-3gcr)\n- [Fix Commit](https://github.com/vllm-project/vllm/commit/3d20275bb4d434f53055c3c0b645fd8bb072965e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-57173) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T05:32:04.684548Z"} 2026-09-17T05:32:04.684548+00:00 https://vulnerability.circl.lu/sighting/7d74038a-3ad8-467c-9597-17d0f7a24608/export 2026-09-17T20:38:39.459635+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7d74038a-3ad8-467c-9597-17d0f7a24608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57042", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117282296044398185", "content": "There is a new vulnerability with elevated criticality in Google Android (CVE-2026-57042) https://vuldb.com/vuln/404546", "creation_timestamp": "2026-09-16T19:10:17.413916Z"} 2026-09-16T19:10:17.413916+00:00 https://vulnerability.circl.lu/sighting/64b93853-04a4-4f5c-9567-0ded043fa426/export 2026-09-17T20:38:39.459741+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "64b93853-04a4-4f5c-9567-0ded043fa426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvme7cocsb2w", "content": "CVE-2026-57140 - praisonai\nVersions 1.6.0 through 1.7.1 of PraisionAI's AgentOS expose two web endpoints that anyone who can reach the server can call without proving who they are. Through these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T05:00:08.763452Z"} 2026-09-16T05:00:08.763452+00:00 https://vulnerability.circl.lu/sighting/a19f8c74-2c29-4d9b-821f-1b54557c8784/export 2026-09-17T20:38:39.459844+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a19f8c74-2c29-4d9b-821f-1b54557c8784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57139", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvme77zlib2y", "content": "CVE-2026-57139 - praisonai\nVersions 1.5.0 through 1.7.1 of PraisonAI\u2019s MCPServer open a network port that accepts requests without requiring a login. Anyone who can reach that port can ask the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T05:00:06.065414Z"} 2026-09-16T05:00:06.065414+00:00 https://vulnerability.circl.lu/sighting/4bf072bc-527d-4a05-9404-2c0d084ab6d0/export 2026-09-17T20:38:39.459940+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4bf072bc-527d-4a05-9404-2c0d084ab6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57138", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmdnemcih25", "content": "CVE-2026-57138 - praisonai\nVersions 1.4.0 through 1.7.1 of PraisonAI allow code entered into the codeMode feature to break out of its sandbox and run arbitrary commands on the server. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T04:50:06.956200Z"} 2026-09-16T04:50:06.956200+00:00 https://vulnerability.circl.lu/sighting/5cc46b9e-3173-4de3-9926-149edbd75c67/export 2026-09-17T20:38:39.460039+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5cc46b9e-3173-4de3-9926-149edbd75c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57141", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmdndgzom2f", "content": "CVE-2026-57141 - praisonai\nVersions of PraisonAI before 1.7.2 let a user who can influence the codeMode tool run their own JavaScript, which can break out of the sandbox and access the server.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T04:50:05.643618Z"} 2026-09-16T04:50:05.643618+00:00 https://vulnerability.circl.lu/sighting/0fc8f986-0684-40ce-ac2d-e963d2e2565d/export 2026-09-17T20:38:39.460134+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0fc8f986-0684-40ce-ac2d-e963d2e2565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmcjkkqrk25", "content": "CVE-2026-57123 - praisonaiagents\nThe PraisonAI MCP server is exposed to the public internet without authentication or origin validation. This allows anyone to access and use the tools\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiagents #mervinpraison #pip #CVE #infosec", "creation_timestamp": "2026-09-16T04:30:04.964611Z"} 2026-09-16T04:30:04.964611+00:00 https://vulnerability.circl.lu/sighting/c8cdc270-f4da-4e85-9c2b-70c8be98db91/export 2026-09-17T20:38:39.460233+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c8cdc270-f4da-4e85-9c2b-70c8be98db91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/35a6gjzikjqml", "content": "CVE-2026-57442 - MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested\nCVE ID : CVE-2026-57442\n \n Published : Sept. 15, 2026, 5:50 p.m. | 15\u00a0minutes ago\n \n Description : MCPVault is a lightweight Model Context Protocol ...", "creation_timestamp": "2026-09-15T19:23:29.051571Z"} 2026-09-15T19:23:29.051571+00:00 https://vulnerability.circl.lu/sighting/1028a170-3c3b-4bfd-ad41-88f6baa0850b/export 2026-09-17T20:38:39.460328+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1028a170-3c3b-4bfd-ad41-88f6baa0850b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57441", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j6fmivvfzeosh", "content": "CVE-2026-57441 - MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence\nCVE ID : CVE-2026-57441\n \n Published : Sept. 15, 2026, 5:49 p.m. | 16\u00a0minutes ago\n \n Description : MCPVault is a lightweight Model Context Protocol server fo...", "creation_timestamp": "2026-09-15T19:17:28.667416Z"} 2026-09-15T19:17:28.667416+00:00