← All credits
Michael Sromin
18 vulnerability records and advisories credit this contributor.
CVE-2026-75128
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
CVE-2026-77926
Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool
CVE-2026-77934
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
CVE-2026-77932
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
CVE-2026-77933
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
CVE-2026-77937
Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
CVE-2026-77938
Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
CVE-2026-77935
Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers