Posts

OpenClaw — CVE-2026-44995 MCP Stdio Server Environment Variable RCE

OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code.

OWASP MCP Top 10 — 38% of MCP Servers Have No Authentication, 30+ CVEs in 60 Days

OWASP publishes the MCP Top 10 revealing 38% of scanned MCP servers lack authentication, 30+ CVEs filed in 60 days, and a STDIO RCE affecting every official MCP SDK.

Slopsquatting — LLM-Hallucinated Package Names Create New Supply Chain Attack Vector

Security researcher registers NPM packages matching names AI coding agents hallucinate, proving a new supply-chain attack primitive where agents auto-install attacker-controlled dependencies.

TeamPCP — Re-Compromises Checkmarx Jenkins AST Plugin Weeks After Initial Breach

TeamPCP breached Checkmarx a second time, backdooring the Jenkins AST plugin just weeks after the initial KICS and VS Code compromise, suggesting incomplete remediation or a retained foothold.

Acronis TRU: 575+ Malicious AI Skills on ClawHub and Hugging Face Deploy Malware

Acronis TRU identified 575+ malicious OpenClaw skills across 13 accounts and Hugging Face repositories used as multi-stage infection chains for trojans, cryptominers, and infostealers.

ClaudeBleed: Chrome Extension Flaw Allows AI Agent Takeover via Prompt Injection

LayerX discovered a Chrome extension vulnerability (ClaudeBleed) that lets any extension hijack Claude in Chrome for data exfiltration, email abuse, and document sharing.

Five Eyes — Joint Guidance Warns Agentic AI Is Too Dangerous for Rapid Rollout

CISA, NSA, NCSC-UK, NCSC-NZ, Canadian Cyber Centre, and ASD/ACSC co-authored guidance urging slow, careful adoption of agentic AI, warning that the interconnected attack surface amplifies organizational security gaps.

Grok/Bankrbot Morse Code Prompt Injection Drains $150K Crypto Wallet

SecurityScorecard — Tens of Thousands of Exposed OpenClaw Instances, 35% RCE-vulnerable

ThreatLabz — Malicious OpenClaw Skill Distributes Remcos RAT and GhostLoader

Zscaler ThreatLabz details a supply-chain campaign where a deceptive OpenClaw skill delivers Remcos RAT on Windows and GhostLoader stealer on macOS/Linux via hidden installer commands.

VentureBeat — AI Tool Poisoning Exposes the Behavioral Integrity Gap in Agent Registries

banks CVE-2026-44209 — Jinja2 SSTI in Prompt Template Library Leads to RCE

PyPI prompt template library banks <= 2.4.1 uses unsandboxed Jinja2, allowing Server-Side Template Injection and full RCE when user-supplied templates reach Prompt().

Oasis Security — Cline Kanban WebSocket Hijack (CVSS 9.7)

CVE-2026-44843 — LangChain Unsafe Deserialization via Overly Broad load() Allowlists

Dragos & Gambit — AI-Assisted OT Intrusion Against Mexican Water Utility

FastGPT CVE-2026-42302 — Agent Sandbox RCE via Disabled Authentication

CVE-2026-34070 — LangChain Path Traversal in Legacy Prompt Template Loading

Anthropic — Fed Chair and Treasury Convene Bank CEOs Over Mythos Cyber Risk

Federal Reserve and Treasury officials warned bank CEOs about automated zero-day discovery after Claude Mythos found thousands of flaws — as Bloomberg reports unauthorized access via a contractor account.

Pillar Security — Gemini CLI "TrustIssues" CVSS 10 Supply-Chain Compromise

Postiz CVE-2026-42298 — "Pwn Request" RCE in AI Social Media Scheduler via GitHub Actions

CVSS 10.0 RCE in Postiz, an AI social media scheduling tool: a malicious PR Dockerfile triggers code execution in GitHub Actions and exfiltrates a write-all GITHUB_TOKEN.