GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Nguyen Huy Hoang (hoanggxyuuki)

9 vulnerability records and advisories credit this contributor.

CVE-2026-86775
knowns before 0.30.0 Path Traversal via Document API
CVE-2026-86544
knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions
CVE-2026-86543
knowns before 0.30.0 Unauthenticated Management API Exposure
CVE-2026-86542
knowns before 0.30.0 Path Traversal via Import Name
CVE-2026-86541
knowns before 0.30.0 Path Traversal via code.replace MCP action
CVE-2026-86540
knowns before 0.30.0 Arbitrary Code Execution via LSP Binary
CVE-2026-86539
knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint
CVE-2026-86538
knowns before 0.30.0 Path Traversal via templateFile parameter
CVE-2026-86439
knowns before 0.30.0 Path Traversal via MCP doc and memory tools