Topic
Security practice of privately reporting vulnerabilities to vendors under embargo deadlines, allowing fixes to ship before public disclosure.
The canonical script-injection fix takes the untrusted expression out of run: and puts it in env:, and shape-matching scanners stop reading there. A new tool follows the value on into the composite action and the Node bundle that finally calls spawn().
Reality
A researcher posting to oss-security reports that all four proof-of-concept exploits gave an unprivileged local user root code execution on the test targets, against kernel code that has been in the tree for between 10 and 21 years.
Reality
Researchers escaped the OpenAI Codex sandbox twice, writing outside the workspace in workspace-write mode and launching a host application from read-only mode. Both bugs were fixed within eight days of being reported.
Reality
Fixes are in for four Linux local-root bugs found in code more than a decade old. Turning off unprivileged user namespaces closes three of them. The fourth stays open.
Reality
The fixes are already upstream, so the work now is confirming your distribution shipped them before someone with a low-privileged shell on a shared host uses the published code to reach root.
Reality
CISA has published the after-action report for an incident its own tooling missed. A researcher who continuously scans public code repositories spotted admin and build credentials and told a reporter.
Reality
An SC Media Perspectives column reports the run took 51 minutes with one human assist, against a couple of days by hand, and the team had Drupal's pre-announcement to prepare before the clock started.
Reality
The credential was in history[].created_by, expanded there by a RUN command that took a build argument, inside a Harbor project anyone could pull anonymously. Baseten rotated it about 17 hours after the disclosure email.
Reality
Rapid7 found CVE-2026-86206 and CVE-2026-86207 while pulling on an earlier N-central bypass, and chained they give a remote caller the top account on the console MSPs use to reach client networks. Hotfix 3 closes both.
Reality
AgentGate read the shipped code behind 30-plus OSV and GHSA flags, verified 19 npm packages as malicious, and found 18 still resolvable on publication day. Removal, not detection, is where the chain stopped.
Reality
API Platform checks authorization per operation, so the guard on the POST told a reviewer nothing about the GET declared on a different entity, and the provider behind that GET trusted the store id in the path.
Reality
Databricks says an ordinary customer role could reach the unchecked array index. The repair went upstream into the open-source extension rather than into either fleet. That is the only version that helps anyone else.
Reality
UltraViolet Cyber's Zonifer chained a missing manager check with an inverted strncmp in Atsign's C sshnpd daemon. Atsign patched in four days, and the CVE that inventory tools would match on is still pending.
Reality
Wordfence says CVE-2026-18431 lets an unauthenticated attacker run PHP on sites running both a vulnerable Avada theme and Fusion Builder. Updating either component breaks the chain.
Reality