{"vulnerability": "CVE-2026-5185", "sightings": [{"uuid": "dc77435f-ddf0-4227-b04d-04ea5575c072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3midx5i7aqd2d", "content": "", "creation_timestamp": "2026-03-31T10:17:39.623247Z"}, {"uuid": "9abf8b17-d42f-457d-bd2e-66d4aae1394e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51851", "type": "seen", "source": "https://gist.github.com/Ro1ME/a1bbf47465175e279a72121cd0df298b", "content": "# CVE-2026-51851\n\n**Type:** Directory Traversal\n**Product:** agent-zero\n**Affected versions:** 1.7, 1.8, 1.9, 1.10\n**Affected component:** `python/helpers/file_browser.py:FileBrowser.save_text_file`\n**Reference:** https://github.com/agent0ai/agent-zero/issues/1541\n\n## Description\n\nmodelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:00:46.000000Z"}, {"uuid": "df9962bb-52b1-4f83-a7a5-c9b8a96b9c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51858", "type": "seen", "source": "https://gist.github.com/Ro1ME/1efc7b63bded3e4d39c54ff7b0caedf4", "content": "# CVE-2026-51858\n\n**Type:** Code Execution\n**Product:** camel-ai\n**Affected versions:** 0.2.91a1\u20130.2.91a3\n**Affected component:** `camel/toolkits/terminal_toolkit/terminal_toolkit.py:TerminalToolkit.shell_exec`\n**Reference:** https://github.com/camel-ai/camel/issues/4038\n\n## Description\n\nIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:19.000000Z"}, {"uuid": "27f8f506-70d6-4db6-9c63-45fd05a74d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51859", "type": "seen", "source": "https://gist.github.com/Ro1ME/df160925a60dd917550f7c87bfe62519", "content": "# CVE-2026-51859\n\n**Type:** Directory Traversal\n**Product:** bisheng\n**Affected versions:** 2.3.0\u20132.4.0-beta1\n**Affected component:** `src/backend/bisheng/core/cache/utils.py:save_download_file`\n**Reference:** https://github.com/dataelement/bisheng/issues/1994\n\n## Description\n\nbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:290).\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:23.000000Z"}, {"uuid": "e1c12dd9-c6b8-4272-b887-67745fae7932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51857", "type": "seen", "source": "https://gist.github.com/Ro1ME/78606e0763520d6519897e90b305d3cd", "content": "# CVE-2026-51857\n\n**Type:** Incorrect Access Control\n**Product:** camel-ai\n**Affected versions:** 0.2.91a1\u20130.2.91a3\n**Affected component:** `camel/interpreters/subprocess_interpreter.py:SubprocessInterpreter.run_file`\n**Reference:** https://github.com/camel-ai/camel/issues/4037\n\n## Description\n\nIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:02:16.000000Z"}, {"uuid": "4477b6d5-69b7-4737-9bdd-2fe661ec9d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51856", "type": "seen", "source": "https://gist.github.com/Ro1ME/c383f66d1fd6de40b6693f9b6cc181e7", "content": "# CVE-2026-51856\n\n**Type:** Incorrect Access Control\n**Product:** AgentScope\n**Affected versions:** 1.0.18\u20131.0.19\n**Affected component:** `src/agentscope/agent/_realtime_agent.py:RealtimeAgent._acting,\nsrc/agentscope/tool/_toolkit.py:Toolkit.call_tool_function,\nsrc/agentscope/tool/_coding/_python.py:execute_python_code`\n**Reference:** https://github.com/agentscope-ai/agentscope/issues/1563\n\n## Description\n\nIn agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python code in the service environment. In the validated path, RealtimeAgent._acting forwards the model-produced tool call to Toolkit.call_tool_function, which invokes execute_python_code without an additional approval or isolation boundary on that path.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:01:57.000000Z"}, {"uuid": "d45ac045-d48b-4c2a-ae42-35049c1fdbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51853", "type": "seen", "source": "https://gist.github.com/Ro1ME/4fe09fc7f94c9c0b10c8b6198a70e920", "content": "# CVE-2026-51853\n\n**Type:** Directory Traversal\n**Product:** agent-zero\n**Affected versions:** 1.7, 1.8, 1.9, 1.10\n**Affected component:** `python/helpers/file_browser.py:FileBrowser.__init__`\n**Reference:** https://github.com/agent0ai/agent-zero/issues/1539\n\n## Description\n\nagent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:01:53.000000Z"}, {"uuid": "d2000301-81b8-4d59-9c44-13ce2e5736f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51852", "type": "seen", "source": "https://gist.github.com/Ro1ME/13af0869833757245685d2d390458664", "content": "# CVE-2026-51852\n\n**Type:** Directory Traversal\n**Product:** agent-zero\n**Affected versions:** 1.7, 1.8, 1.9, 1.10\n**Affected component:** `python/helpers/file_browser.py:FileBrowser.save_file_b64`\n**Reference:** https://github.com/agent0ai/agent-zero/issues/1540\n\n## Description\n\nagent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.\n\n## Discoverer\n\nRo1ME\n", "creation_timestamp": "2026-09-26T04:01:49.000000Z"}]}