CVE-2026-33625
8.8 · High
Code execution in LMDeploy through eval() of a model’s quant_dtype
A crafted quantization_config in a Hugging Face model made LMDeploy pass quant_dtype to eval(), so loading the model ran the attacker’s Python code.
Language and package
PyPI
Python projects.
7 write-ups, 7 vulnerabilities
CVE-2026-77262
8.6 · HighArbitrary file read in MCP Atlassian through confluence_upload_attachment
MCP Atlassian opened any file_path passed to its Confluence upload tool, so a caller could read host files and push them out as attachments.
GHSA-wg9g-w2j2-8pgr
7.8 · High
Code execution in MONAI through pickled NumPy files read by NumpyReader
MONAI’s NumpyReader loaded .npy and .npz files with allow_pickle=True, so a poisoned file in a medical imaging dataset ran code on load.
CVE-2026-40864
Highlighted 5.4 · Medium
XSRF bypass in JupyterHub through Sec-Fetch-Mode: no-cors requests
JupyterHub 4.1.0 to 5.4.4 skipped its XSRF check for any no-cors request, so a page on another origin could submit Hub forms for a logged-in user.
CVE-2026-41490
8.3 · High
SQL injection in Dagster database I/O managers through dynamic partition keys
Dagster’s DuckDB, Snowflake, BigQuery and DeltaLake I/O managers copied dynamic partition keys into SQL, so adding a partition was enough to inject queries.
CVE-2026-33980
8.3 · HighKQL injection in Azure Data Explorer MCP Server through table_name
Three metadata tools of adx-mcp-server pasted table_name into KQL, letting an agent run arbitrary queries without going through execute_query.
CVE-2026-32247
8.1 · High
Cypher injection in Graphiti through search filter node labels
Graphiti pasted search filter node labels into raw Cypher, allowing a caller to bypass group filtering; writes depend on the database route and permissions.
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-33625 | LMDeploy | eval() of quant_dtype from the model quantization_config | 8.8 High | |
| CVE-2026-77262 | MCP Atlassian | Path traversal in confluence_upload_attachment | 8.6 High | |
| GHSA-wg9g-w2j2-8pgr | MONAI | Unsafe deserialisation in NumpyReader | 7.8 High | |
| CVE-2026-40864 | JupyterHub | XSRF bypass for no-cors requests | 5.4 Medium | |
| CVE-2026-41490 | Dagster | SQL injection through dynamic partition keys in database I/O managers | 8.3 High | |
| CVE-2026-33980 | Azure Data Explorer MCP Server | KQL injection through table_name in three metadata tools | 8.3 High | |
| CVE-2026-32247 | Graphiti | Cypher injection through SearchFilters.node_labels | 8.1 High |