Bobur Abdugafforov

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send a single unauthenticated HTTP GET request exploiting the failure of normalize path() to strip traversal sequences, disclosing sensitive files such as environment configuration files containing credentials and system files.

**Name of the Vulnerable Software and Affected Versions** Azuriom CMS versions prior to 1.2.11 **Description** Missing authorization in the server management routes allows an authenticated attacker with the `admin.access` permission to create AzLink server tokens. This can lead to the takeover of non-admin user accounts by modifying their passwords and email addresses through crafted HTTP requests to the '/admin/servers/create' endpoint and the AzLink API endpoints '/api/azlink/password', '/api/azlink/email', and '/api/azlink/user/{id}'. **Recommendations** Update to version 1.2.11 or later.

**Name of the Vulnerable Software and Affected Versions** OpenHuman desktop agent versions prior to 0.56.0 **Description** The shell tool command allowlist in the SecurityPolicy can be bypassed to execute arbitrary OS commands with the privileges of the desktop user. This occurs due to two flaws in `src/openhuman/security/policy.rs`: the `is args safe()` function fails to block the `-execdir` and `-okdir` flags for the find command, and the `skip env assignments()` function strips leading inline environment-variable assignments before allowlist validation. This allows commands like `GIT EXTERNAL DIFF=<cmd> git diff` to be validated as allowed while executing arbitrary commands through environment-driven hooks such as `GIT EXTERNAL DIFF` or `GIT SSH COMMAND`. An attacker can achieve remote code execution via indirect prompt injection, where malicious content ingested by the agent triggers an allowlisted command to perform unauthorized actions, including data exfiltration and lateral movement. **Recommendations** Update to version 0.56.0 or later.