Alertas de Seguridad de la Información

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54322] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's organization role update and delete endpoints authorized the caller as an owner of the organization named in the request path, but resolved and mutated the target role by its identifier alone, without verifying the role belonged to that organization. An authentica…

nvdaltovulnerabilidad CVSS 7.7 NVD

K Crítico vulnerabilidad

23/06/2026

[CVE-2026-53753] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expres…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes (gi_frame, f_back, f_builtins) do NOT start with underscore, enabling a complete sandbox escape to achieve arbitrary code execution.…

nvdcriticovulnerabilidad CVSS 9.8 NVD

K Alto vulnerabilidad

23/06/2026

[CVE-2026-53754] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection (validate_webhook_url / validate_url_destination in deploy/docker/utils.py) used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach internal services and cloud metadata endpoints (e.g. 169.254.169.254) despite the filter by encoding …

nvdaltovulnerabilidad CVSS 7.5 NVD

K Alto vulnerabilidad

23/06/2026

[CVE-2026-53755] Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server…

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unauthenticated request could supply a proxy pointing at an internal IP and route the browser through it, reaching internal services and cloud-metadata endpoints, while using a perfectly valid crawl URL. T…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

23/06/2026

[CVE-2026-54320] Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor…

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted (and declined) by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and matches an invitation's target email against the email in the caller's token, but the invitation accept…

nvdaltovulnerabilidad CVSS 8.4 NVD

A Crítico vulnerabilidad

23/06/2026

[CVE-2026-54316] Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.…

Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was auto-approved without a permission prompt or being subject to --allowedTools restrictions. An attacker able to inject untrusted content into a Claude Code contex…

nvdcriticovulnerabilidad CVSS 9.1 NVD

H Alto vulnerabilidad

23/06/2026

[CVE-2026-54317] Home Assistant is open source home automation software that puts local control and privacy first. Pr…

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integration registers an HTTP endpoint, KonnectedView (homeassistant/components/konnected/__init__.py), that is marked as not requiring authentication (requires_auth = False). A comment next to that line says auth is instead handled "via the access token from configura…

nvdaltovulnerabilidad CVSS 7.6 NVD

H Alto vulnerabilidad

23/06/2026

[CVE-2026-54318] Home Assistant is open source home automation software that puts local control and privacy first. Pr…

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any installed app, with zero runtime permissions, can broadcast a forged Google Play Services LocationResult directly to it; the receiver trusts the extra and forwards it to the user's Home Assistant server …

nvdaltovulnerabilidad CVSS 7.1 NVD

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-54157] LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow…

LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.57, the /webapi/proxy endpoint on app.lobehub.com accepts a URL in the POST body and fetches it server-side without any authentication. An attacker can use this to make arbitrary outbound requests from LobeHub's infrastructure, leak Vercel deployment details, and inject cooki…

nvdcriticovulnerabilidad CVSS 9.0 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54013] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user profile images and webhook profile images but forgot to apply the same fix to model profile images. The ModelMeta class has no validate_profile_image_url field validator, and the model image serving endpoint has no MIME allowlist or nosniff header. A…

nvdaltovulnerabilidad CVSS 7.6 NVD

C Alto vulnerabilidad

23/06/2026

[CVE-2026-52844] Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy …

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/*, but file_server later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy path-scoped auth/deny routes protecting /private/*. This vulnerability is fixed in 2.11.4.

nvdaltovulnerabilidad CVSS 7.5 NVD

C Alto vulnerabilidad

23/06/2026

[CVE-2026-52845] Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_…

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact client-supplied identity header before copying the trusted value from the auth gateway. But when the request later goes through php_fastcgi, Caddy normalizes HTTP headers into CGI variables by replacing - with _. This lets a client send an underscore alias that survives the…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Crítico vulnerabilidad

23/06/2026

[CVE-2026-53662] immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 u…

immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 until 4eb1003, a reflected cross-site scripting (XSS) vulnerability on the /auth/login page allows an attacker to fully compromise any authenticated user's account with a single link click. The continue query parameter is read from the URL and passed to SvelteKit's redirect() without any scheme or or…

nvdcriticovulnerabilidad CVSS 9.6 NVD

O Alto vulnerabilidad

23/06/2026

[CVE-2026-54008] Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. P…

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, backend/open_webui/utils/oauth.py::_process_picture_url calls validate_url(picture_url) on the initial URL only, then invokes aiohttp.ClientSession.get(picture_url, ...) without allow_redirects=False. aiohttp's default is allow_redirects=True, max_redirects=10; the function does not p…

nvdaltovulnerabilidad CVSS 8.5 NVD

D Alto vulnerabilidad

23/06/2026

[CVE-2026-49401] Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permission system…

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permission system enforces filesystem and execution restrictions by comparing the requested path against the path supplied to --deny-read, --deny-write, --deny-run, or --deny-ffi. On macOS, that comparison was done at the raw-byte level while the APFS filesystem treats different Unicode spellings of the same name as…

nvdaltovulnerabilidad CVSS 7.3 NVD

D Alto vulnerabilidad

23/06/2026

[CVE-2026-49402] Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_proces…

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_process implementation provided an escapeShellArg() helper used when callers passed shell: true to spawn / spawnSync / exec and friends. On Windows, the helper failed to quote arguments that contained cmd.exe metacharacters and did not neutralize % (which cmd.exe expands even inside double-quoted strings)…

nvdaltovulnerabilidad CVSS 8.1 NVD

C Alto vulnerabilidad

23/06/2026

[CVE-2026-45135] Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCG…

Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCGI transport's splitPos() in modules/caddyhttp/reverseproxy/fastcgi/fastcgi.go misuses golang.org/x/text/search with search.IgnoreCase when the request path contains a non-ASCII byte. Two distinct flaws in that fallback let an attacker mislead Caddy's FastCGI splitting into treating a non-.php (or ot…

nvdaltovulnerabilidad CVSS 8.1 NVD

D Alto vulnerabilidad

23/06/2026

[CVE-2026-44726] Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.0.0 until 2.7.8, a flaw in Deno's …

Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.0.0 until 2.7.8, a flaw in Deno's Node.js tls compatibility layer could cause a TLS client to transmit application data in plaintext after a connection retry. When `autoSelectFamily was enabled and the first address-family attempt failed, the socket reinitialization path reused a stale TLS upgrade hook that was bound to the original…

nvdaltovulnerabilidad CVSS 7.4 NVD

A Alto vulnerabilidad

23/06/2026

[CVE-2020-9695] Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier a…

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvdaltovulnerabilidad CVSS 7.8 NVD

B Alto vulnerabilidad

23/06/2026

[CVE-2026-56115] Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low…

Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users pa…

nvdaltovulnerabilidad CVSS 8.8 NVD