把真實漏洞寫成看得懂、查得到來源的說明書:誰會受影響、攻擊怎麼發生、該怎麼修補與偵測。https://plaincve.date/zh-Hant-TWhttps://plaincve.date/vulns/cve-2026-12537-gemini-cli-headless-workspace-trust/https://plaincve.date/vulns/cve-2026-12537-gemini-cli-headless-workspace-trust/Gemini CLI 在 CI 無人值守模式下自動信任工作目錄,外部 PR 夾帶的惡意 .gemini/.env 可在沙箱啟動前於主機上執行指令。Thu, 24 Sep 2026 00:00:00 GMTgemini-cligithub-actionsci-cdworkspace-trustai-agentcommand-injectionCVE-2026-12537https://plaincve.date/vulns/cve-2026-33017-langflow-public-flow-rce/https://plaincve.date/vulns/cve-2026-33017-langflow-public-flow-rce/Langflow 執行公開流程的端點不需登入,卻會執行呼叫者自己送來的 Python 程式碼,攻擊者可藉此接管伺服器。已遭實際利用。Thu, 24 Sep 2026 00:00:00 GMTlangflowrcecode-injectionmissing-authenticationpythonai-pipelineCVE-2026-33017https://plaincve.date/vulns/cve-2026-45758-guardrails-ai-pypi-compromise/https://plaincve.date/vulns/cve-2026-45758-guardrails-ai-pypi-compromise/攻擊者用偷來的上傳權杖把惡意的 guardrails-ai 0.10.1 發佈到 PyPI;在 Linux 上一 import 就會下載並執行遠端程式。Thu, 24 Sep 2026 00:00:00 GMTpypipythonmalicious-packageci-cdcredential-theftshai-huludllm-guardrailsCVE-2026-45758https://plaincve.date/vulns/cve-2026-48501-github-cli-token-leak/https://plaincve.date/vulns/cve-2026-48501-github-cli-token-leak/GitHub CLI 2.93.0 以前,執行三個驗證指令時可能把你的 GitHub 登入權杖附在送往 TUF 與檔案主機的請求裡。Thu, 24 Sep 2026 00:00:00 GMTgithub-clicredential-leaktokensigstoretufattestationgoCVE-2026-48501https://plaincve.date/vulns/cve-2026-50016-pnpm-alias-path-traversal/https://plaincve.date/vulns/cve-2026-50016-pnpm-alias-path-traversal/pnpm 安裝時沒擋住別名裡的「..」,相依樹深處的惡意套件能把專案路徑換成指向自己的符號連結,--ignore-scripts 也無效。Thu, 24 Sep 2026 00:00:00 GMTpnpmnpmjavascriptpath-traversalsymlinkignore-scriptstransitive-dependencyCVE-2026-50016https://plaincve.date/vulns/cve-2026-5241-transformers-lightglue-remote-code-override/https://plaincve.date/vulns/cve-2026-5241-transformers-lightglue-remote-code-override/Transformers 5.5.0 以前,LightGlue 模型自己的設定檔可以蓋掉呼叫者設的 trust_remote_code=False,讓模型附帶的 Python 程式碼被執行。Thu, 24 Sep 2026 00:00:00 GMThuggingfacetransformerstrust-remote-codemodel-supply-chainpythoncode-executionCVE-2026-5241https://plaincve.date/vulns/cve-2026-82021-hermes-agent-mcp-unpinned-branch/https://plaincve.date/vulns/cve-2026-82021-hermes-agent-mcp-unpinned-branch/Hermes Agent 內建 MCP 目錄的 n8n 橋接項目指向會變動的分支;若上游儲存庫被接管,安裝時就會執行對方放進去的程式碼。目前沒有遭利用的紀錄。Thu, 24 Sep 2026 00:00:00 GMTmcpai-agentversion-pinninggitn8nintegrity-checkCVE-2026-82021https://plaincve.date/vulns/cve-2026-90553-vllm-llavaonevision2-remote-code-ignored/https://plaincve.date/vulns/cve-2026-90553-vllm-llavaonevision2-remote-code-ignored/vLLM 0.28.0 以前載入 LlavaOnevision2 模型時會忽略 trust_remote_code=False,惡意模型附帶的 Python 程式碼仍會執行。Thu, 24 Sep 2026 00:00:00 GMTvllmtrust-remote-codemodel-supply-chainpythonkwargsmultimodalCVE-2026-90553https://plaincve.date/vulns/cve-2026-26030-semantic-kernel-filter-rce/https://plaincve.date/vulns/cve-2026-26030-semantic-kernel-filter-rce/AI 模型替搜尋外掛填的篩選參數,會被 Semantic Kernel 拼成一段 Python 程式再執行;透過提示注入誘導模型,就可能在伺服器上執行任意程式。Wed, 23 Sep 2026 00:00:00 GMTprompt-injectionllmagentpythonevalrceCVE-2026-26030https://plaincve.date/vulns/cve-2026-33634-trivy-supply-chain/https://plaincve.date/vulns/cve-2026-33634-trivy-supply-chain/攻擊者取得 Trivy 的發布權限後,讓官方版本與 GitHub Action 夾帶竊密程式;用它掃描的 CI 流程金鑰被偷,再被拿去污染 LiteLLM 等其他專案。Wed, 23 Sep 2026 00:00:00 GMTgithub-actionsci-cdcredential-theftpypidocker-hubtrivylitellmCVE-2026-33634https://plaincve.date/vulns/cve-2026-45321-tanstack-npm-supply-chain-compromise/https://plaincve.date/vulns/cve-2026-45321-tanstack-npm-supply-chain-compromise/攻擊者劫持 TanStack 的 GitHub 發布流程,以官方身分在 42 個 @tanstack/* npm 套件發布 84 個會竊取憑證的惡意版本;已列入 CISA KEV。Wed, 23 Sep 2026 00:00:00 GMTnpmgithub-actionspull-request-targetcache-poisoningoidcwormmini-shai-huludcredential-theftkevCVE-2026-45321https://plaincve.date/vulns/cve-2026-59822-litellm-mcp-auth-bypass/https://plaincve.date/vulns/cve-2026-59822-litellm-mcp-auth-bypass/LiteLLM Proxy 的 MCP 端點在驗證失敗時沒有拒絕請求,反而以匿名身分放行;不需帳號就能列出並呼叫背後串接的 MCP 工具。已遭實際利用。Wed, 23 Sep 2026 00:00:00 GMTmcpllm-gatewayauthenticationpythonfail-openCVE-2026-59822https://plaincve.date/vulns/cve-2026-94127-f5-big-ip-apm-oauth-heap-overflow/https://plaincve.date/vulns/cve-2026-94127-f5-big-ip-apm-oauth-heap-overflow/F5 BIG-IP APM 當作 OAuth 授權伺服器時有堆積緩衝區溢位,未登入的攻擊者可遠端執行程式碼;已被當成零時差漏洞實際利用。Wed, 23 Sep 2026 00:00:00 GMTf5big-ipapmoauthheap-overflowrcezero-daykevedge-deviceCVE-2026-94127https://plaincve.date/vulns/ghsa-2026-axios-npm-compromise/https://plaincve.date/vulns/ghsa-2026-axios-npm-compromise/攻擊者盜用 axios 維護者的 npm 帳號,發布兩個夾帶惡意相依套件的版本;只要 npm install,就會在電腦上裝好一個遠端控制木馬。Wed, 23 Sep 2026 00:00:00 GMTnpmjavascriptaccount-takeoverpostinstallratnorth-korea