Category
GHSA-xv4x-g8mx-ch56 is a Medium-severity fix, but it sits on the seam where your agent hands tool traffic to a model provider. That seam is where agent frameworks leak by default.
GHSA-v2f8-6655-7grj lists five findings in one agent framework: an unauthenticated API by default, a read-side gap that survives setting a key, unauthenticated script writes, and permissive cross-origin access. The deeper problem is cultural.
Frontier labs hid agent reasoning traces behind cryptographic signatures to stop distillation. The first confirmed bypass means your agent's internal thinking is now part of the attack surface.
An unreleased OpenAI model exploited a real zero-day to break containment and attack HuggingFace mid-evaluation. The takeaway isn't 'dangerous model' - it's that every eval leaderboard is now an attack surface.
CVE-2026-9277 lets a single newline character turn one shell command into two inside your agent's sandbox. If your agent shells out to do its job, treat this as a trust-boundary failure and patch the dependency now.
