{"uuid": "33e88335-e0b3-4065-9f12-51edda088178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32034", "type": "seen", "source": "https://t.me/hacking_Attack/184244", "content": "We let an LLM loose on open-source apps. It found 3 CVEs, one of them a CVSS 8.9 RCE.\nhttps://www.reddit.com/r/Pentesting/comments/1stprgd/we_let_an_llm_loose_on_opensource_apps_it_found_3/\n\nWe've been running AIDA an autonomous pentesting agent against open-source targets as part of testing the tool itself. The agent reasons about the application, generates payloads, iterates, and documents everything. Here's what came out: CVE-2026-32034 \u2014 openclaw/openclaw (https://github.com/openclaw/openclaw)\n CVSS 5.6 MEDIUM\n Insecure HTTP permits traffic hijacking. Classic, but the agent found it by correlating the tech stack with known attack paths and confirming it via HTTP manipulation. GHSA-xfvv-ggvq-pchh \u2014 appsmithorg/appsmith (https://github.com/appsmithorg/appsmith)\n CVSS 8.9 HIGH\n RCE via newline injection in an env variable endpoint. The agent generated a custom Python payload, sent it, observed the behavior, confirmed code execution, and logged the full reproduction chain. This one ended up in the security advisory. GHSA-vvxf-f8q9-86gh \u2014 appsmithorg/appsmith\n CVSS 5.1 MEDIUM\n SSRF through the SMTP test endpoint \u2014 the agent used it for internal port scanning and flagged the reachable services. All three reported through proper channels. More are under coordinated disclosure and haven't published yet. The agent doesn't replace the human, you still review, reproduce, and decide what to report. But it runs the grunt work and hands you everything: the command, the raw output, the reasoning. Repo: https://github.com/Vasco0x4/AIDA    submitted by    /u/TomatoWasabi  (https://www.reddit.com/user/TomatoWasabi) \n [link] (https://www.reddit.com/r/Pentesting/comments/1stprgd/we_let_an_llm_loose_on_opensource_apps_it_found_3/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1stprgd/we_let_an_llm_loose_on_opensource_apps_it_found_3/)", "creation_timestamp": "2026-09-02T01:00:27.699930Z"}