CWE-78
PulseAugur coverage of CWE-78 — every cluster mentioning CWE-78 across labs, papers, and developer communities, ranked by signal.
2 day(s) with sentiment data
-
NameTrap attack steers AI coding agents toward security flaws via variable names
Researchers have developed a novel attack called NameTrap that exploits AI coding agents by manipulating variable names in third-party Python code. This method steers agents toward introducing specific security vulnerab…
-
Vibe-Trading AI agent vulnerable to root command execution via prompt injection
A critical prompt injection vulnerability, CVE-2026-114107, has been discovered in Vibe-Trading's AI trading-research agent, specifically in versions prior to 0.1.7. This vulnerability allows attackers to execute arbitr…
-
Critical OS Command Injection Vulnerability Found in Langflow AI Platform
A critical vulnerability, CVE-2026-105697, has been disclosed in the open-source AI agent prototyping platform Langflow. The vulnerability allows for OS command injection, enabling any user to execute arbitrary commands…
-
LLMs outperform traditional tools in identifying JavaScript code vulnerabilities
A new research paper explores the use of Large Language Models (LLMs) for identifying vulnerabilities in JavaScript code. The study found that LLMs significantly outperform traditional Static Application Security Testin…