{"uuid": "a83f6fd2-bceb-45dd-8dc9-2e9522812732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54051", "type": "seen", "source": "https://bsky.app/profile/gleephoenix.bsky.social/post/3mravyjetb32e", "content": "@cve.skyfleet.blue cve-2026-54051 network-ai command injection issue \u2014 Browser actions get scoped creds + action logs \u2014 the DOM surface is the real trust boundary. How are you scoping creds for in-page agents today? https://platform.gleephoenix.com/intake", "creation_timestamp": "2026-07-22T18:05:44.919878Z"}