Linux Kernel TCP Flaw Gets AI-Built Root Exploit

Linux kernel TCP flaw CVE-2026-98432: an AI-built remote root exploit targets the IPv4 TCP handshake, patch and reboot, November 2026

A Linux kernel TCP flaw now has a working remote root exploit, and an AI model built it. CVE-2026-98432 (CVSS 9.8) is a use-after-free in the IPv4 TCP handshake that has been in the kernel since version 4.4. As of November 2, Debian and Red Hat ship fixed kernels, Ubuntu still lists its fixes as…

Read More

LiteLLM Supply Chain Attack: A Key Never Revoked

LiteLLM supply chain attack: backdoored release 1.107.0 on PyPI and Docker, October 2026

The LiteLLM supply chain attack of October 21 did not start on October 21. According to LiteLLM’s own root cause report, a master key committed to a public repository on May 27 was never revoked. An attacker used it on October 10 to reach the GitHub account of an organization owner, and eleven days later…

Read More

LiteLLM MCP Authentication Bypass: Patch Now

A LiteLLM MCP authentication bypass lets attackers skip OAuth2 login entirely. Active exploitation confirmed, first MCP flaw in CISA KEV.

A LiteLLM MCP authentication bypass, CVE-2026-59822 (CVSS 8.8), lets an attacker skip OAuth2 login entirely when connecting to Model Context Protocol servers through LiteLLM’s proxy, gaining whatever access an authenticated session would carry. CISA added the flaw to its Known Exploited Vulnerabilities catalog on September 2, the first MCP-related vulnerability ever listed there; WatchTowr reports…

Read More

Ruflo RufRoot CVE-2026-59726: AI Agents Hijacked

Ruflo RufRoot CVE-2026-59726 (CVSS 10.0) lets attackers hijack AI agents via an unauthenticated MCP bridge exposed to the network by default.

Ruflo RufRoot CVE-2026-59726, a maximum-severity CVSS 10.0 flaw disclosed by Noma Security, lets an unauthenticated attacker take full control of an AI agent platform used by an estimated one million people — through a single HTTP request against a management bridge that ships exposed to the network by default. What Happened Ruflo is an open-source…

Read More