← All credits
Michael Sromin
18 vulnerability records and advisories credit this contributor.
CVE-2026-77931
MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
CVE-2026-109437
Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend
CVE-2026-109440
LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode
CVE-2026-109444
OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection
CVE-2026-77930
EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents
CVE-2026-109443
JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
CVE-2026-76066
IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode
CVE-2026-109442
piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell
CVE-2026-77936
Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access
CVE-2026-109441
LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge