flawopen.com/Teardowns
Security Patch Teardowns
Most security advisories are filled with vague descriptions or impenetrable binary reverse-engineering. Our teardowns isolate the actual 5–10 lines of high-level source code that caused the flaw, explain the developer's original mistake with intuitive real-world analogies, and extract practical defensive engineering rules.
CVE-2026-10032: A2UI Agent-Generated Button XSS
In affected @a2ui/web_core releases, the default Basic Catalog's `openUrl` action passed an agent-supplied URL to `window.open` without restricting its scheme. A person had to click the rendered Button for the advisory's browser-origin impact; upgrade to 0.10.2 or later.
CVE-2026-106119: LangChain MongoDB Session Query Injection
CVE-2026-106119 affects `@langchain/mongodb` through 1.3.0 when untrusted session IDs reach `MongoDBChatMessageHistory` and multiple users share a collection. Upgrade to 1.3.1 or later.
CVE-2026-107722: fast-jwt RSA-to-HS256 Algorithm Confusion
In fast-jwt 6.2.0–6.2.4, a non-whitespace prefix could move an RSA PEM header past a start-anchored detector. In affected verifier configurations, the key could fall through to HMAC handling and permit JWT signature confusion. Version 6.3.0 fixes key classification; callers should also allow only the expected asymmetric algorithms.
CVE-2026-66384: JFrog Artifactory Docker Cache Path Traversal
CVE-2026-66384 lets an authenticated user write outside the intended JFrog Artifactory Docker cache under specific remote-repository conditions. Upgrade affected self-hosted instances.
CVE-2026-102255: SonicWall SMA1000 WorkPlace SSRF
CVE-2026-102255 is a CVSS 10.0 pre-authentication SSRF in the SonicWall SMA1000 WorkPlace interface. The appliance can issue requests on a caller’s behalf and reach internal functionality. Upgrade affected builds to the vendor’s fixed platform hotfix. SonicWall’s October 6 notice said there was no evidence of in-the-wild exploitation at that time. On October 9, BleepingComputer reported that researcher Ryan Dewhurst said Previdian honeypots detected attempts consistent with this CVE; Dewhurst said successful compromise had not been established.
CVE-2024-0582: Linux io_uring Mapped Buffer Ring Use-After-Free
CVE-2024-0582 (CVSS 7.8, High): a provided buffer ring registered with IORING_REGISTER_PBUF_RING and IOU_PBUF_RING_MMAP was freed during teardown while user space still had it mmap()ed, leaving a page the attacker could read and write after the kernel reused it, for local privilege escalation.
CVE-2024-1086: Linux nf_tables Use-After-Free
CVE-2024-1086: Linux nf_tables use-after-free from invalid DROP parameters. Install your distribution’s fixed kernel; package versions vary.
CVE-2023-2640: Ubuntu OverlayFS LPE
CVE-2023-2640 is an Ubuntu OverlayFS permission-check bypass on specific kernel builds. Check your kernel flavor and install the vendor fix.
CVE-2023-6246: glibc syslog Heap Overflow
CVE-2023-6246 is a glibc syslog heap overflow triggered by a long log header. Update to your distribution’s fixed glibc package.
CVE-2024-26585: Linux TLS Close Race
A Linux kTLS completion woke sendmsg/recvmsg before queuing TX work. The fix schedules work first to close the socket-race window.
CVE-2024-26642: Linux nf_tables Anonymous Set with Timeout Flag
CVE-2024-26642 (CVSS 7.8 per NIST): nf_tables_newset() accepted anonymous sets that also carried the timeout flag, a combination no userspace tool creates, which exposed rule-bound sets to element expiry and garbage collection. Linux 6.8 rejects it with -EOPNOTSUPP.
CVE-2024-32896: Android Factory Reset Could Be Interrupted Before Keys Were Destroyed
CVE-2024-32896 (CVSS 7.8, exploited in limited, targeted attacks): a factory reset only rebooted into recovery and left the encryption keys in place until the wipe ran, so someone holding the phone could interrupt the reboot and keep the data recoverable. The fix deletes all Keystore keys before rebooting.
CVE-2024-33066: Qualcomm WLAN Resource Manager log redirection memory corruption
CVE-2024-33066 is a critical (CVSS 9.8) input-validation flaw in the WLAN Resource Manager of Qualcomm's IPQ and QCN Wi-Fi networking chipsets: redirecting a log file to a caller-chosen location and name could corrupt memory. Qualcomm fixed it in its October 2024 bulletin, and no exploitation has been reported.
CVE-2015-3824: Stagefright tx3g Integer Overflow in Android libstagefright
How an unchecked size addition while parsing the MPEG-4 tx3g subtitle atom wrapped around, allocated a tiny heap buffer and let a crafted video corrupt mediaserver memory without any user interaction.
CVE-2023-4211: Mali use-after-free
A Mali VMA lifetime bug could leave a stale `mm_struct` pointer and cause a kernel use-after-free write. Arm fixed it in r43.
CVE-2024-23712: Android AppOps Attribution Tag Resource Exhaustion
CVE-2024-23712 (CVSS 5.5; Android rates it High): AppOpsService recorded any proxy attribution tag a calling app supplied, so an ordinary app could grow /data/system/appops_accesses.xml without limit and cause a local denial of service, with no extra permissions.
CVE-2020-0022: Android Bluetooth overflow
CVE-2020-0022 caused critical RCE on Android 8–9 and moderate DoS on Android 10. AOSP fixed the L2CAP length bug in the February 2020 patch.
CVE-2021-22960: llhttp Request Smuggling
llhttp ignored chunk extensions in request bodies, enabling HTTP request smuggling under certain conditions. Node.js fixed the parser in October 2021.
CVE-2023-32558: Node.js Permission Bypass
In Node.js 20, process.binding() could bypass the experimental Permission Model through path traversal. Fixed in Node.js 20.5.1.
CVE-2022-31150: Undici CRLF Injection
CVE-2022-31150 let untrusted CR/LF reach Undici request serialization. See the upstream validation fix and safe upgrade guidance.
CVE-2024-27980: Node.js Windows Command Injection
On Windows, spawn() and spawnSync() could allow command injection when launching batch files, even without the shell option.
CVE-2024-5321: Kubernetes Windows Node Container Log Permissions
CVE-2024-5321 (CVSS 6.1, Medium): on Windows nodes the kubelet created pod log directories with os.MkdirAll, which ignores the permission mode on Windows, so the logs inherited an ACL that let BUILTIN\Users read them and Authenticated Users modify them.
CVE-2024-7646: Ingress-NGINX Validation Bypass
A carriage-return bypass enabled command injection and access to controller credentials. Fixed in 1.11.2/1.10.4; ingress-nginx is retired.
CVE-2024-3177: Kubernetes ServiceAccount Admission envFrom Secrets Bypass
CVE-2024-3177 (CVSS 2.7, Low): the kube-apiserver ServiceAccount admission plugin checked Secret volumes and env valueFrom references against a service account's allow-list, but never looked at envFrom, so a pod could load any Secret in its namespace.
CVE-2024-21626: runc 'Leaky Vessels' Container Breakout Teardown
How an internal /proc/self/cwd file descriptor leak in libcontainer/init_linux.go allowed container processes to break out to the host filesystem across Docker and Kubernetes.
CVE-2024-4947: Chrome V8 Maglev Type Confusion
Maglev’s store bug let a crafted page trigger type confusion and code execution inside Chrome’s renderer sandbox. Google confirmed exploitation.
CVE-2024-32002: Git Submodule Symlink RCE
Plain-English root cause analysis of CVE-2024-32002: how case-insensitive filesystems and symlinks allowed Git clone to execute arbitrary code, and the 6-line C patch that fixed it.
CVE-2024-3094: XZ Utils Backdoor & IFUNC Hooking
Technical source code teardown of CVE-2024-3094: how malicious GNU Autotools m4 macros in release tarballs hijacked OpenSSH authentication via liblzma IFUNC symbol resolution.
CVE-2024-30051: Windows DWM Core Library Heap Overflow Teardown
How an unchecked 32-bit integer addition in dwmcore.dll allowed local malware to trigger an undersized heap allocation, corrupt memory, and escalate to SYSTEM privileges.
CVE-2024-23222: WebKit DFG Property Race
WebKit's DFG JIT could fold a property across an object-structure change; the fix revalidates assumptions before accepting optimized code.
CVE-2022-22965: Spring4Shell ClassLoader Binding RCE
Source code teardown of Spring4Shell (CVE-2022-22965): Java BeanWrapper property navigation into Tomcat AccessLogValve to write a webshell to disk.
CVE-2021-3156: Sudo Baron Samedit Heap Overflow
Technical post-mortem of CVE-2021-3156, the sudo heap buffer overflow: how an unescaping bug hidden for a decade gave any local user root on most Linux systems.
CVE-2014-0160: OpenSSL Heartbleed Buffer Overread
Line-by-line patch teardown of CVE-2014-0160 (Heartbleed): the missing payload bounds check in OpenSSL's tls1_process_heartbeat() and the 4-line C fix.
CVE-2026-65995: OsmAnd AIDL Authorization Bypass
OsmAnd 5.3.3 auto-approved unknown callers to an exported Android AIDL service, exposing location and file operations to any app already installed on the device. The public advisory confirms a fix but does not name the first fixed release or publish a CVSS score.
CVE-2025-55182: React2Shell RSC RCE
CVE-2025-55182 is unauthenticated remote code execution in React Server Components (RSC) payload decoding. React confirmed the decoder flaw; Google Threat Intelligence later documented campaigns deploying downloaders, backdoors, and miners.
CVE-2026-76485: Cisco Nexus NGOAM Remote Code Execution
CVE-2026-76485 affects Cisco Nexus 3000 and 9000 switches in standalone NX-OS mode when NGOAM is enabled. Check the feature state, assess service impact before disabling NGOAM, and use Cisco Software Checker for the fixed release for your platform and branch.
Langflow CVE-2026-5027: Multipart File-Write Path Traversal
CVE-2026-5027 enabled file writes beyond Langflow’s upload area via path traversal. GTIG reports exploitation; upgrade to 1.9.0 or later.
CVE-2026-25592: Semantic Kernel Agent File Write
CVE-2026-25592 exposed Semantic Kernel’s download helper as an AI tool, enabling host file writes. Remove model access and upgrade to 1.71.0.
CVE-2026-49878: Android Wi-Fi wpa_supplicant Heap Out-of-Bounds Write
Android’s October 2026 bulletin rates this Wi-Fi RCE flaw High. In wpa_supplicant, two int arrays were allocated by byte count; AOSP fixes both with os_calloc. The CVE record says System privileges are required.
CVE-2026-21589: Atlassian Data Center File Access
CVE-2026-21589 abuses Atlassian’s shared web-resource path decoding to read known files without authentication. watchTowr demonstrated a conditional Crowd credential chain; sensor telemetry later observed attempts, not confirmed customer compromise.
CVE-2026-106032: AgentCore Importer OpenAPI SSRF
Bedrock AgentCore Starter Toolkit versions through 0.3.13 resolved external OpenAPI references while importing an agent, allowing crafted action-group data to trigger outbound requests or local-file reads. Upgrade to 0.3.14 or later, re-import affected agents, and replace generated artifacts.
Linux CVE-2026-53266: ebtables ARP Writeability
A missing writeability check in Linux bridge netfilter’s ebt_snat path could let an ARP rewrite modify a shared fragment page. The upstream fix makes the ARP sender-address range writable before the write.
CVE-2015-3306: ProFTPD mod_copy unauthenticated file copying
CVE-2015-3306 let unauthenticated clients use ProFTPD mod_copy commands to copy files on the server. The upstream fix checks authentication in both SITE CPFR and SITE CPTO handlers; CISA added the issue to KEV on 2026-10-08.
CVE-2026-1731: BeyondTrust Command Injection
CVE-2026-1731 allows pre-auth OS commands via WebSocket in unpatched BeyondTrust Remote Support/PRA. Patch and investigate exposed systems.
CVE-2026-87902: WordPress Page-Template Path Traversal
An unvalidated decoded page name entered WordPress template resolution, allowing unauthenticated local PHP file inclusion and conditional RCE when the theme and PHP environment met specific prerequisites.
CVE-2026-104286: FortiMail IBE Path Traversal
CVE-2026-104286 lets unauthenticated HTTP(S) requests write files on vulnerable FortiMail systems through path traversal. Fortinet reports in-the-wild exploitation; disable IBE or restrict web access, investigate for compromise, and install the correct fixed release.
CVE-2026-90970: GitLab AI Gateway prompt sandbox escape
A specially crafted Duo Agent Platform flow could escape the AI Gateway prompt-template sandbox and execute commands. Self-hosted Gateway operators should upgrade to the fixed release for their GitLab line.
CVE-2026-73570: How Zimbra's SNMP notification path became command injection
CVE-2026-73570 is an unauthenticated command-injection flaw in Zimbra's optional SNMP notification path. A specially formed email could influence a service-status value later interpolated into a shell command; Zimbra fixed the invocation in 10.1.20, and Microsoft reports exploitation before public disclosure.
CVE-2026-105699: Langflow MCP File Disclosure
Langflow authenticated the MCP connection but did not authorize each requested file. A user could read another user’s flow files; 1.9.1 fixes the ownership check.
CVE-2026-105751: Docling ODF File Disclosure
Docling’s ODF backend could treat a document’s image reference as a local path and read it outside the archive. Upgrade to 2.120.3; the fix sends resource loading through the shared fetch-control component.
CVE-2026-88779: Citrix NetScaler SAML Memory Overflow
CVE-2026-88779 is a memory-overflow vulnerability in customer-managed Citrix NetScaler ADC and Gateway. It affects deployments with SAML authentication configured and is being used in targeted attacks to cause denial of service; Citrix reports no identified customer-data integrity impact.
CVE-2026-61500: Rejetto HFS Predictable Session Signing Key
Rejetto HFS 3.0.0–3.2.0 used Math.random-derived values in its session-signing and login flows. Horizon3 reports that the exposed PRNG state could enable an unauthenticated attacker to forge an administrator session; upgrade to 3.2.1 or later.
CVE-2026-105697: Langflow MCP Command Injection
Before 1.10.3, Langflow passed MCP stdio configuration to a shell-backed process. On an exposed instance with `LANGFLOW_AUTO_LOGIN=true`, an attacker could obtain a token without credentials; with auto-login disabled, an authenticated non-admin could still reach host command execution. Version 1.10.3 validates every path, including immediately before spawn, and launches without a shell.
CVE-2026-31431: Linux Copy Fail Kernel Flaw
Copy Fail is a local privilege-escalation flaw in the Linux AF_ALG AEAD path. An in-place processing optimization confused source and destination mappings; the upstream fix restores out-of-place operation, and CISA lists the CVE in KEV.
CVE-2026-84973: JupyterLab Snapshot Workflow TOCTOU
A one-second timestamp check could let a snapshot workflow check out an unapproved pull-request commit and execute it with the job’s permissions. Upgrade update-snapshots-checkout to 1.0.0 or later.
CVE-2026-71416: Headroom WebSocket Origin Hijack
Headroom skipped WebSocket Origin checks; a visited site could relay LLM requests through its reachable proxy. Upgrade to 0.35.0+.
CVE-2026-105750: Docling HTML Render Local File Disclosure
Docling versions before 2.118.1 can disclose local text files when Python code renders untrusted HTML from a filesystem Path with render_page=True and Playwright installed. The HTML browser path failed to enforce enable_local_fetch and directory confinement. Upgrade to 2.118.1 or later.
CVE-2026-77244: mcp-atlassian Unauthenticated HTTP Tool Access
CVE-2026-77244 let unauthenticated callers reach the community mcp-atlassian HTTP tool handlers, which could fall back to the operator's environment-configured Jira or Confluence credentials. The maintainer fixed this in 0.22.0; SSE users need 0.23.1 or later for a separate related transport flaw.
CVE-2026-87913: AWS MCP S3 Data Exposure
A predictable AWS Security Agent bucket could send private scan archives to another account. Upgrade to 0.2.0 and verify bucket ownership.
CVE-2026-102422: shell-quote comment-token injection
Before shell-quote 1.11.0, a comment token followed by a string containing a line terminator could make quoted output change meaning when passed to a POSIX shell. The vulnerable condition requires attacker-influenced tokens, a call to `quote()`, and execution of its output by a shell; upgrade to 1.11.0 or later.
Chrome Gemini CVE-2026-0628 Extension Flaw
CVE-2026-0628 let a Chrome extension affect Gemini’s privileged WebView through DNR; update Chrome to 143.0.7499.192 or later.
Linux CVE-2025-39682: kTLS Zero-Length Record Bug
A zero-length non-data TLS record in Linux’s kTLS receive queue could bypass the per-recvmsg record-type check. The fix checks the processed record type even when recvmsg copied zero bytes. The Linux CVSS assessment describes possible kernel-heap disclosure to userspace, memory corruption, and remote kernel crashes; these are assessed consequences, not claims that every affected system experiences each outcome.
CVE-2026-76504: Cisco SD-WAN Manager Authentication Bypass
CVE-2026-76504 lets an unauthenticated remote attacker bypass an API authentication rule in Cisco Catalyst SD-WAN Manager and obtain admin-level API access. Cisco confirms active exploitation; upgrade to the fixed release for your branch and investigate the manager before assuming it is clean.
CVE-2026-97662: AWS Security Agent MCP Git Argument Injection
CVE-2026-97662 let a caller-influenced Git revision in AWS Security Agent MCP diff scans be parsed as a command option, bypassing workspace confinement and enabling host file writes. Upgrade to 0.2.0 or later.
CVE-2026-102437: Reasonix diff-view Git injection
A poisoned .gitattributes/.git/config pair can run a clean filter when Reasonix renders a diff. Update npm to 1.39.3 or Studio to 2.21.0.
CVE-2026-105812: AgentCore import code injection
In Bedrock AgentCore Starter Toolkit through 0.3.13, crafted same-account agent configuration could be copied into generated Python without safe literal encoding. A second user who imported and then ran or deployed that agent could execute code with their local privileges or the AgentCore runtime role; upgrading alone does not repair previously generated artifacts.
LangGraph CVE-2026-104873: Auth Bypass
LangGraph SDK 0.1.45–0.4.3 ignored `actions=` on three Python auth decorators, risking permission bypass. Upgrade to 0.4.4.
CVE-2026-27826: MCP Atlassian Header SSRF
CVE-2026-27826's original header-based SSRF was fixed in 0.17.0. Separate follow-up SSRF flaws were fixed in 0.22.0; check each advisory before setting a fleet minimum.
CVE-2026-14540: Google MCP Toolbox SSRF
CVE-2026-14540 let MCP Toolbox HTTP requests follow redirects without checking their final network destination. Upgrade to 1.5.0 or later.
CVE-2026-105752: vLLM cache-salt omission
A vLLM GPT-OSS Responses tool continuation could omit the request's cache_salt, placing that continuation in an unsalted prefix-cache namespace. Upgrade to vLLM 0.30.0 or later and preserve tenant-scoped cache salts across every continuation.
CVE-2026-63277: LibreOffice Calc spreadsheet RCE
A crafted Calc document could use an external data mapping to make LibreOffice resolve a Java database-driver class from a non-local class-path URL when a person opened it. LibreOffice 26.2.5 and 26.8.0 restrict these entries to the `file` scheme; this is a document-open interaction, not a zero-click network flaw.
LangGraph CVE-2026-71433: Namespace Leak
LangGraph Postgres and SQLite scoped reads could cross namespace boundaries and expose sibling tenant data. Upgrade both checkpoint packages to 3.1.1.
CVE-2026-55269: Android Bluetooth SnoopLogger heap write
Google lists this Android Bluetooth memory-safety issue in its October 2026 bulletin. The upstream fix corrects a packet-size guard and bounds parsing; the documented path requires specific developer logging and filter settings.