The Approval Bound the Wrong Commit: GitHub Actions TOCTOU
A privileged workflow can inherit secrets, write tokens, and attacker-controlled artifacts. Learn how to bind the GitHub Actions handoff to immutable evidence.
- FeaturedAI Security
Advanced Threat Modeling: Identities, Trust Boundaries, and Attack Chains
Advanced threat modeling in practice: identities, trust boundaries, SSRF, cloud metadata, delegated tokens, and blast radius across real attack chains.
-
-
The Regex Wrapped the Counter: GitLab CVE-2026-97229
CVE-2026-97229 lets a crafted CI regular expression reach GitLab native compilation and potentially execute code on the server. Trace the integer-wrap mechanics, patch evolution, safe lab, detection, and control-plane response.
-
The Debugger Compiled the String: CVE-2026-102870
CVE-2026-102870 lets attacker-controlled Blazor application data escape into generated debugger source. This analysis maps the developer-workstation attack chain, a safe mechanism lab, patch scope, and detection opportunities.
-
The Sandbox Was Only a Dataclass: PraisonAI’s Policy Gap
PraisonAI exposed a dangerous gap between declared sandbox policy and enforced runtime controls. We trace the agent-to-shell chain, reproduce two mechanics safely, and map the fixes and detections that matter.
-
The Shard Had Two Identities: Elasticsearch CVE-2026-103009
CVE-2026-103009 let cross-cluster authorization validate one shard identity while execution followed another. Trace the patch, detection, and hardening.
-
The Button Was the Payload: A2UI CVE-2026-10032
CVE-2026-10032 shows how an agent-generated button can turn declarative UI data into browser behavior. Trace the sink, safe lab, patch, and detections.
-
The Browser Changed the Address: DBHub DNS Rebinding to SQL
CVE-2026-61742 turned a browser into a network pivot against DBHub MCP. We reproduce the DNS rebinding flaw, compare 0.22.4 with 0.22.5, and map practical detection and defense.
-
The Template Passed Review: Nuclei Scanner Trust
Five Nuclei flaws show how alternate loaders, embedded runtimes, and response evaluation can turn a security scanner into the asset under attack.
-
The Proxy Saw One Request: http4s Ember HTTP Desync
Three http4s Ember flaws let proxies and origins disagree about HTTP request boundaries. Trace the mechanics, safe lab, detection, and durable fixes.
-
The Username Was a File Descriptor: Inside MikroTrick
CVE-2026-86060 turned a crafted RouterOS SSH identity into administrative policy. Trace MikroTrick, a safe lab, detection logic, and trusted recovery.
-
The Link Was Checked Too Late: CVE-2026-81963
CVE-2026-81963 is an exploited Windows Update link-following flaw. Trace the SYSTEM escalation model, safe mechanism lab, detection logic, and patch validation.
-
The Constructor Was the Endpoint: Jenkins Stapler Data Binding
Jenkins configuration forms can become constructor dispatch. Trace the September 2026 flaws, a safe mechanism lab, detection signals, and durable fixes.
-
The ID Was in the Body: CVE-2026-47849 and JSON Patch
CVE-2026-47849 let JSON Patch mutate Spring Data REST identifiers and version fields. This analysis verifies the binding flaw, traces the cross-record overwrite path, and maps practical detection and hardening controls.
-
Two Patches, One Hook: Inside Gitea CVE-2026-60004
CVE-2026-60004 turns duplicate Gitea diffpatch requests into an executable Git hook. Analyze the attack chain, detection signals, and containment.
-
The Model Returned Python: CVE-2026-61539 and Tool-Parser RCE
CVE-2026-61539 turned attacker-influenced Llama tool output into Python RCE inside Xinference. This analysis traces the parser boundary, validates the primitive in a safe local lab, and maps durable detection and hardening controls.
