Security Findings

CyStack researcher Huy Nguyen discovered a TLS verification bypass in Node.js's HTTPS Agent. The agent pools and reuses TLS sessions, but the reuse logic did not account for connections made under different identity policies, so a session established for one host could be reused for another without re-checking the hostname. That lets a man-in-the-middle reuse a valid session to serve a different host while skipping the hostname verification that would normally reject it. It is an incomplete fix for CVE-2026-48934 and affects the 22.x, 24.x, and 26.x lines; upgrading to v22.23.2, v24.18.1, or v26.5.1 fixes it.

CyStack researcher Trung Nguyen discovered a local privilege escalation flaw in the Accounts component of Apple macOS. A parsing issue in how directory paths are handled let an app supply a crafted path that escaped the intended directory, so an unprivileged application could abuse it to gain root privileges on the machine. Apple addressed it with improved path validation. It affects macOS before Sonoma 14.8.8, Sequoia 15.7.8, and Tahoe 26.6; updating to those releases fixes it.

CyStack researcher Trung Nguyen discovered a kernel memory-corruption flaw in the HFS filesystem component of Apple macOS. A memory-handling error lets a remote user cause unexpected system termination (a kernel panic) or corrupt kernel memory, crashing the machine and, in the worst case, undermining the integrity of the kernel itself. Apple addressed it with improved memory handling. It affects macOS before Sonoma 14.8.8, Sequoia 15.7.8, and Tahoe 26.6; updating to those releases fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service vulnerability in RabbitMQ's Shovel plugin and proved it by wedging a broker within about a minute. When a management user with the 'policymaker' tag sets Shovel runtime parameters, several of the supplied values are turned into Erlang atoms before they are bounded or checked against a fixed allowlist. Erlang atoms are global to the VM and are never garbage-collected, so an attacker who can create Shovel parameters can permanently consume entries in the node-wide atom table until the node crashes — in the tested lab, in roughly 64 seconds. The dangerous twist is persistence: the malicious parameters are stored durably, so every later broker restart re-parses them and recreates the atom pressure with no attacker even connected, and can block normal restart recovery until the stored parameters are removed offline. Because a single vhost-scoped privilege exhausts a global VM resource, one tenant can take down the whole node, including other vhosts. It affects RabbitMQ 4.2.0–4.2.8 and 4.3.0–4.3.2; upgrading to 4.2.9 or 4.3.3 fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service vulnerability in RabbitMQ, one of the most widely deployed open-source message brokers, and proved it by killing a memory-limited broker with a single HTTP request. When the stream management plugin handles a request to create a super-stream, it parses the attacker-controlled 'binding-keys' field and builds the entire stream-name list in memory before it checks whether the user is allowed to configure those streams. As a result a low-privileged management user — one with access to a vhost but no configure, write, or read permission — can force a huge transient allocation ahead of the permission check: in a 768 MB container a single PUT with about 4.5 MB of JSON body was enough to OOM-kill the node (Docker exit 137). The impact is worst in Kubernetes, Docker, or systemd deployments that run RabbitMQ under a hard memory cap, where one request takes the whole node offline. It affects RabbitMQ 4.1.0–4.1.10, 4.2.0–4.2.8, and 4.3.0–4.3.2; upgrading to 4.1.11, 4.2.9, or 4.3.3 fixes it.

CyStack researcher Duong Tran discovered an authorization-bypass vulnerability in RabbitMQ's Federation plugin that breaks the broker's core tenancy boundary, and proved it by draining another tenant's messages. Vhost isolation is what keeps tenants apart in RabbitMQ, and a 'policymaker' user is supposed to be confined to the vhosts it can log into. But when a federation-upstream is defined with an empty-host ("direct") URI, the validator never checks the creating user against the vhost embedded in that URI — the exact check RabbitMQ's own Shovel plugin performs on the same primitive. As a result a low-trust 'policymaker' on one vhost can declare an upstream, queue, and policy that pull messages out of a completely different vhost it has no permission on; the federation link connects internally as a privileged 'none' user that approves every check. With the default ack mode the victim's messages are consumed and deleted, not merely copied, so it is both a confidentiality breach and data loss across the tenancy boundary. It affects RabbitMQ 3.13.0–3.13.17, 4.0.0–4.0.23, 4.1.0–4.1.13, 4.2.0–4.2.8, and 4.3.0–4.3.2; upgrading to 3.13.18, 4.0.24, 4.1.14, 4.2.9, or 4.3.3 fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service vulnerability in Unbound, one of the most widely deployed open-source DNS resolvers, and proved it by crashing the resolver with a single malicious DNSCrypt query sent over TCP. The routine that encrypts DNSCrypt replies in place fails to bound the reply length against the destination buffer: the size clamp that protects the UDP path is not applied on the TCP path, so a reply larger than 65,504 bytes is shifted forward by 48 bytes and written past the end of the heap allocation. One bad query is enough to crash the server and knock DNS resolution offline for everyone behind it. The flaw is reachable by any remote client when Unbound is compiled with DNSCrypt support ('--enable-dnscrypt') and the 'dnscrypt:' clause is enabled on listening interfaces — a common setup for privacy-focused public resolvers. It affects Unbound 1.9.0 through 1.25.1; upgrading to 1.25.2 fixes it.

CyStack researcher Thanh Nguyen discovered a denial-of-service vulnerability in the JSON component of Oracle MySQL Server. An attacker with only a low-privileged database account can trigger it over the network and make the server hang or crash repeatedly, taking the database offline. Because JSON columns and functions are used heavily by modern applications, the affected code path is reachable by ordinary application queries rather than administrative ones. It affects MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Thanh Nguyen discovered a denial-of-service vulnerability in the GIS (geospatial) component of Oracle MySQL Server. Any attacker holding even a low-privileged database account can reach the flaw over the network and make the server hang or crash repeatedly, knocking the database offline for every application that relies on it. The low bar matters: ordinary application accounts are usually enough, so a single compromised or hostile user can disrupt the whole service. It affects MySQL Server and MySQL Cluster 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Phuc Nguyen discovered a vulnerability in the replication component of Oracle MySQL Server. An attacker who already holds high database privileges and can reach the server over the network — through any of the protocols MySQL exposes — can exploit it to take over MySQL Server entirely, gaining the ability to read, alter, and destroy all data it holds. The flaw matters most in clustered and replicated deployments, where database nodes routinely accept traffic from one another. It affects MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Trung Nguyen discovered a critical vulnerability in the core of Oracle Coherence. It is easily exploitable by a completely unauthenticated attacker who can reach the product over TCP, and a successful attack results in full takeover of Oracle Coherence — letting the attacker read, modify, and destroy the in-memory data grid and the application state held in it. Coherence clusters typically sit deep inside enterprise application tiers holding session and transaction data, so a single reachable node is a severe exposure. It affects Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Duong Tran discovered a vulnerability in the core of Oracle VM VirtualBox. A low-privileged attacker who can log in to the host running VirtualBox can exploit it to take over the product completely, gaining full read, write, and destroy access over VirtualBox and the virtual machines it manages. That breaks the isolation users rely on VirtualBox to provide — an unprivileged local account should never be able to reach across into the hypervisor or other guests. It affects Oracle VM VirtualBox 7.2.12; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Phuc Nguyen discovered a denial-of-service vulnerability in the replication component of Oracle MySQL Server. An unauthenticated attacker with access to the host running the database can exploit it to hang or repeatedly crash MySQL Server, taking the database — and every application depending on it — offline. No data is read or modified, but the outage itself is the impact. It affects MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Duong Tran discovered an information disclosure flaw in Wireshark's BLF (Binary Logging Format) file parser. The parser reads memory it never initialized while processing a malformed BLF capture, so leftover bytes from the process can surface in the decoded output. An attacker who convinces an analyst to open a crafted BLF file could thus disclose small amounts of potentially sensitive memory contents. It affects Wireshark 4.6.0–4.6.6 and 4.4.0–4.4.16; upgrading to 4.6.7 or 4.4.17 fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service flaw in Wireshark's DBS Etherwatch file parser. The parser mishandles a malformed packet trace file and overflows a stack buffer, so simply opening a crafted capture makes Wireshark crash. An attacker only needs to convince an analyst to open such a file — a realistic scenario since capture files are routinely shared for troubleshooting — to disrupt the analyst's work. It affects Wireshark 4.6.0–4.6.6 and 4.4.0–4.4.16; upgrading to 4.6.7 or 4.4.17 fixes it.

CyStack researcher Thanh Nguyen discovered an arbitrary file write flaw in rclone's local backend. With the --links flag, rclone stores symlinks as .rclonelink text files holding the target path, and when syncing from a remote it calls os.Symlink() on that target without validating it. A malicious remote can therefore supply a .rclonelink whose target is an absolute path or a ../ traversal, so rclone creates a symlink that escapes the destination directory and later writes land on files like ~/.ssh/authorized_keys, shell startup files, or cron jobs — giving the attacker code execution as the victim user. It affects rclone through v1.74.3; upgrading to v1.74.4 fixes it.

CyStack researcher Thanh Nguyen discovered a privilege-escalation flaw in rclone's local backend. When copying with the -M/--metadata flag, rclone applies the source-supplied mode, uid, and gid to the created file without masking the setuid/setgid bits, so a malicious remote can mark a binary with a setuid mode. A victim who runs rclone copy -M from that source then plants a setuid executable — owned by root if rclone runs as root — turning into a local privilege-escalation backdoor. It affects rclone through v1.74.3; upgrading to v1.74.4 fixes it.

CyStack researcher Trung Nguyen discovered an XML External Entity (XXE) flaw in Foxit PDF Reader and Editor. When the application opens a crafted XDP document disguised as a PDF, its XML parser resolves external entities without adequate restrictions, so a malicious file can force the reader to fetch attacker-named resources and leak their contents. This lets an attacker who gets a victim to open such a file disclose local files or internal network data. It affects Foxit PDF Reader/Editor 2026.1.1.36485 and earlier (and the corresponding 13.x/14.x builds); upgrading to 2026.1.2, 14.0.5, or 13.2.5 fixes it.

CyStack researcher Phuc Nguyen discovered a tar path-traversal (TarSlip) flaw in Frappe Framework's package import. When Frappe extracts an imported package archive, it writes each entry using the path stored in the archive without confining it to the target directory, so an archive containing ../ entries can drop files anywhere the Frappe process can write. An attacker who gets a crafted package imported can thus overwrite application code or configuration and achieve remote code execution on the server. It affects Frappe before 15.112.0 and before 16.23.0; upgrading to 15.112.0 or 16.23.0 fixes it.

A critical vulnerability in Coolify versions 4.0.0-beta.471 to 4.0.0-beta.473 allows authenticated users to execute arbitrary shell commands on the host system. This issue arises from a regression in the SHELL_SAFE_COMMAND_PATTERN, which improperly handles ampersands in Docker Compose command fields. The vulnerability has been addressed in version 4.0.0-beta.474.