CVE-2026-103663 lets an unauthenticated caller of Ollama's /api/pull write files outside the model store and get code run as root. Upgrade to 0.35.0 and close port 11434.
Paste a docker-compose, requirements.txt or package.json. The preview is free and needs no account.
The scanner's verdicts on this example, computed now from our copy of NVD.
CISA added nine Langflow, n8n and LiteLLM CVEs to its exploited list in 2026. The versions to run, the three bug patterns, and what to lock down.
Specs, power draw and which agent fits each host, compared side by side.
Pick the components you run. Every 6 hours PocketClaw matches new NVD entries against them and emails you, with an optional Discord or Slack webhook. Unlimited full scans are included.
€9 a month or €49 a year after the trial. Cancel any time. Single full scans are €1.99.
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by URL path but stores the caller's raw…
The alert a Pro account watching n8n gets for this CVE.
12 of the CVEs we track are on CISA's Known Exploited Vulnerabilities list. Patch these first.
| CVE-2025-68613 | n8n | Critical Remote Code Execution (RCE) in their workflow expression evaluation system. Fixed in 1.120.4, 1.121.1, 1.122.0. | 9.9 |
| CVE-2026-9198 | Langflow | Lets unauthenticated attackers chain /api/v1/auto_login with /api/v1/validate/code. Fixed in 1.10.1. | 9.8 |
| CVE-2026-42208 | LiteLLM | A database query used during proxy API key checks mixed the caller-supplied key value. Fixed in 1.83.7. | 9.8 |
| CVE-2026-33017 | Langflow | The POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows. Fixed in 1.8.2, 1.9.0. | 9.8 |
| CVE-2026-0770 | Langflow | Remote Code Execution via exec_globals | 9.8 |
What each batch of CVEs needs from the attacker, the fixed versions, and the settings that matter more than the patch.
Third-party add-ons around OpenClaw and Hermes Agent picked up CVEs in October 2026: an unauthenticated prompt-injection port, a skill that deletes your home directory, a config injection that runs shell commands.
NVD published 19 Open WebUI CVEs on 12 October 2026, all fixed in 0.11.4: session token theft from any website, terminal privilege escalation and stored XSS.
Ollama CVE-2026-5757 leaks heap memory to unauthenticated callers; Triton's DALI backend (CVE-2026-24213/24214/24264) has integer-overflow and OOB bugs.
All-time CVE count on NIST NVD, and how many are on CISA KEV. Each one has its own page.