Vulnerability Disclosures & Security Research

CyStack researcher Khanh Vu discovered an authentication bypass in the Automation Broker of Splunk SOAR. The broker trusts a client-supplied source IP header to decide whether a request is authorized, so an unauthenticated attacker can spoof the originating IP and forge requests to a notification endpoint that should be restricted. This lets the attacker reach privileged functionality and achieve remote code execution on the Splunk SOAR host, fully compromising its confidentiality, integrity, and availability. It affects Splunk SOAR before 8.6.0; upgrading to 8.6.0 fixes it.

CyStack researcher Duong Tran discovered an authorization flaw in Wazuh Manager that exposes the cluster's shared secret to a low-privilege user, and proved it by retrieving `cluster.key` in clear text from the official Wazuh Manager 4.14.5 image. Wazuh's `mask_sensitive_config()` hides configuration secrets only when `_has_update_permissions()` says the caller cannot edit the configuration, but that check treated any `manager:update_config` or `cluster:update_config` rule as permission—even one whose effect is `deny`. An authenticated monitoring account with configuration-read access and an explicit update deny can therefore make one raw-configuration request and receive the real key instead of `*****`; adding the restrictive rule is what triggers the leak. Because the key authenticates inter-node cluster traffic, its disclosure could enable attempts to join or impersonate a node when the cluster port is reachable, although Wazuh describes that follow-on attack as plausible rather than verified. The flaw affects Wazuh Manager 4.14.0–4.14.6 and 5.0.0-beta1/beta2; upgrading to 4.14.7 or 5.0.0-beta3 and later fixes it.

CyStack researcher Trung Nguyen discovered an arbitrary file read in HashiCorp's Vault Secrets Operator that lets a low-privileged Kubernetes tenant steal the operator's own credentials. The operator allowed a VaultAuth resource to name a file on disk holding the AppRole secret ID (`spec.appRole.secretIDPath`); it rejected path-traversal sequences and checked that the target was a regular file under a size limit, but never restricted which files could be named. Any tenant able to create VaultAuth, VaultConnection and VaultStaticSecret resources could therefore point that field at any file the operator pod can read — its Kubernetes service account token, mounted TLS keys, other tenants' Vault credentials — and, by pairing it with a VaultConnection aimed at a server they control, have the operator send the contents straight to the attacker. Because the operator runs cluster-wide with far more privilege than the tenant, a limited namespace foothold turns into privilege escalation across the whole cluster, which is why it scores 9.6/10. It affects versions 1.3.0 through 1.4.1; version 1.5.0 removes the field entirely and existing configurations must migrate to `spec.appRole.secretRef`.

CyStack researcher Trung Nguyen discovered an incorrect-default-permissions vulnerability in Microsoft PowerShell that lets a local, low-privileged attacker elevate to SYSTEM privileges. Microsoft identifies the root cause as permissions that are too broad by default: an authorized attacker can submit controlled input to the vulnerable operation and, after required interaction by another user, cross the local privilege boundary and gain full control of the machine. The attack has low complexity and requires a local foothold but not administrator rights; Microsoft says exploitation is less likely and has not observed it in the wild. The flaw affects PowerShell 7.4.0 up to but excluding 7.4.19, 7.5.0 up to but excluding 7.5.10, and 7.6.0 up to but excluding 7.6.5; upgrading to 7.4.19, 7.5.10, or 7.6.5 fixes it.

CyStack researcher Huy Nguyen discovered a TLS verification bypass in Node.js's HTTPS Agent. The agent pools and reuses TLS sessions, but the reuse logic did not account for connections made under different identity policies, so a session established for one host could be reused for another without re-checking the hostname. That lets a man-in-the-middle reuse a valid session to serve a different host while skipping the hostname verification that would normally reject it. It is an incomplete fix for CVE-2026-48934 and affects the 22.x, 24.x, and 26.x lines; upgrading to v22.23.2, v24.18.1, or v26.5.1 fixes it.

CyStack researcher Trung Nguyen discovered a local privilege escalation flaw in the Accounts component of Apple macOS. A parsing issue in how directory paths are handled let an app supply a crafted path that escaped the intended directory, so an unprivileged application could abuse it to gain root privileges on the machine. Apple addressed it with improved path validation. It affects macOS before Sonoma 14.8.8, Sequoia 15.7.8, and Tahoe 26.6; updating to those releases fixes it.

CyStack researcher Trung Nguyen discovered a kernel memory-corruption flaw in the HFS filesystem component of Apple macOS. A memory-handling error lets a remote user cause unexpected system termination (a kernel panic) or corrupt kernel memory, crashing the machine and, in the worst case, undermining the integrity of the kernel itself. Apple addressed it with improved memory handling. It affects macOS before Sonoma 14.8.8, Sequoia 15.7.8, and Tahoe 26.6; updating to those releases fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service vulnerability in RabbitMQ's Shovel plugin and proved it by wedging a broker within about a minute. When a management user with the 'policymaker' tag sets Shovel runtime parameters, several of the supplied values are turned into Erlang atoms before they are bounded or checked against a fixed allowlist. Erlang atoms are global to the VM and are never garbage-collected, so an attacker who can create Shovel parameters can permanently consume entries in the node-wide atom table until the node crashes — in the tested lab, in roughly 64 seconds. The dangerous twist is persistence: the malicious parameters are stored durably, so every later broker restart re-parses them and recreates the atom pressure with no attacker even connected, and can block normal restart recovery until the stored parameters are removed offline. Because a single vhost-scoped privilege exhausts a global VM resource, one tenant can take down the whole node, including other vhosts. It affects RabbitMQ 4.2.0–4.2.8 and 4.3.0–4.3.2; upgrading to 4.2.9 or 4.3.3 fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service vulnerability in RabbitMQ, one of the most widely deployed open-source message brokers, and proved it by killing a memory-limited broker with a single HTTP request. When the stream management plugin handles a request to create a super-stream, it parses the attacker-controlled 'binding-keys' field and builds the entire stream-name list in memory before it checks whether the user is allowed to configure those streams. As a result a low-privileged management user — one with access to a vhost but no configure, write, or read permission — can force a huge transient allocation ahead of the permission check: in a 768 MB container a single PUT with about 4.5 MB of JSON body was enough to OOM-kill the node (Docker exit 137). The impact is worst in Kubernetes, Docker, or systemd deployments that run RabbitMQ under a hard memory cap, where one request takes the whole node offline. It affects RabbitMQ 4.1.0–4.1.10, 4.2.0–4.2.8, and 4.3.0–4.3.2; upgrading to 4.1.11, 4.2.9, or 4.3.3 fixes it.

CyStack researcher Duong Tran discovered an authorization-bypass vulnerability in RabbitMQ's Federation plugin that breaks the broker's core tenancy boundary, and proved it by draining another tenant's messages. Vhost isolation is what keeps tenants apart in RabbitMQ, and a 'policymaker' user is supposed to be confined to the vhosts it can log into. But when a federation-upstream is defined with an empty-host ("direct") URI, the validator never checks the creating user against the vhost embedded in that URI — the exact check RabbitMQ's own Shovel plugin performs on the same primitive. As a result a low-trust 'policymaker' on one vhost can declare an upstream, queue, and policy that pull messages out of a completely different vhost it has no permission on; the federation link connects internally as a privileged 'none' user that approves every check. With the default ack mode the victim's messages are consumed and deleted, not merely copied, so it is both a confidentiality breach and data loss across the tenancy boundary. It affects RabbitMQ 3.13.0–3.13.17, 4.0.0–4.0.23, 4.1.0–4.1.13, 4.2.0–4.2.8, and 4.3.0–4.3.2; upgrading to 3.13.18, 4.0.24, 4.1.14, 4.2.9, or 4.3.3 fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service vulnerability in Unbound, one of the most widely deployed open-source DNS resolvers, and proved it by crashing the resolver with a single malicious DNSCrypt query sent over TCP. The routine that encrypts DNSCrypt replies in place fails to bound the reply length against the destination buffer: the size clamp that protects the UDP path is not applied on the TCP path, so a reply larger than 65,504 bytes is shifted forward by 48 bytes and written past the end of the heap allocation. One bad query is enough to crash the server and knock DNS resolution offline for everyone behind it. The flaw is reachable by any remote client when Unbound is compiled with DNSCrypt support ('--enable-dnscrypt') and the 'dnscrypt:' clause is enabled on listening interfaces — a common setup for privacy-focused public resolvers. It affects Unbound 1.9.0 through 1.25.1; upgrading to 1.25.2 fixes it.

CyStack researcher Thanh Nguyen discovered a denial-of-service vulnerability in the JSON component of Oracle MySQL Server. An attacker with only a low-privileged database account can trigger it over the network and make the server hang or crash repeatedly, taking the database offline. Because JSON columns and functions are used heavily by modern applications, the affected code path is reachable by ordinary application queries rather than administrative ones. It affects MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Thanh Nguyen discovered a denial-of-service vulnerability in the GIS (geospatial) component of Oracle MySQL Server. Any attacker holding even a low-privileged database account can reach the flaw over the network and make the server hang or crash repeatedly, knocking the database offline for every application that relies on it. The low bar matters: ordinary application accounts are usually enough, so a single compromised or hostile user can disrupt the whole service. It affects MySQL Server and MySQL Cluster 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Phuc Nguyen discovered a vulnerability in the replication component of Oracle MySQL Server. An attacker who already holds high database privileges and can reach the server over the network — through any of the protocols MySQL exposes — can exploit it to take over MySQL Server entirely, gaining the ability to read, alter, and destroy all data it holds. The flaw matters most in clustered and replicated deployments, where database nodes routinely accept traffic from one another. It affects MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Trung Nguyen discovered a critical vulnerability in the core of Oracle Coherence. It is easily exploitable by a completely unauthenticated attacker who can reach the product over TCP, and a successful attack results in full takeover of Oracle Coherence — letting the attacker read, modify, and destroy the in-memory data grid and the application state held in it. Coherence clusters typically sit deep inside enterprise application tiers holding session and transaction data, so a single reachable node is a severe exposure. It affects Coherence 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Duong Tran discovered a vulnerability in the core of Oracle VM VirtualBox. A low-privileged attacker who can log in to the host running VirtualBox can exploit it to take over the product completely, gaining full read, write, and destroy access over VirtualBox and the virtual machines it manages. That breaks the isolation users rely on VirtualBox to provide — an unprivileged local account should never be able to reach across into the hypervisor or other guests. It affects Oracle VM VirtualBox 7.2.12; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Phuc Nguyen discovered a denial-of-service vulnerability in the replication component of Oracle MySQL Server. An unauthenticated attacker with access to the host running the database can exploit it to hang or repeatedly crash MySQL Server, taking the database — and every application depending on it — offline. No data is read or modified, but the outage itself is the impact. It affects MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1 and MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1; Oracle's July 2026 Critical Patch Update fixes it.

CyStack researcher Duong Tran discovered an information disclosure flaw in Wireshark's BLF (Binary Logging Format) file parser. The parser reads memory it never initialized while processing a malformed BLF capture, so leftover bytes from the process can surface in the decoded output. An attacker who convinces an analyst to open a crafted BLF file could thus disclose small amounts of potentially sensitive memory contents. It affects Wireshark 4.6.0–4.6.6 and 4.4.0–4.4.16; upgrading to 4.6.7 or 4.4.17 fixes it.

CyStack researcher Trung Nguyen discovered a denial-of-service flaw in Wireshark's DBS Etherwatch file parser. The parser mishandles a malformed packet trace file and overflows a stack buffer, so simply opening a crafted capture makes Wireshark crash. An attacker only needs to convince an analyst to open such a file — a realistic scenario since capture files are routinely shared for troubleshooting — to disrupt the analyst's work. It affects Wireshark 4.6.0–4.6.6 and 4.4.0–4.4.16; upgrading to 4.6.7 or 4.4.17 fixes it.

CyStack researcher Thanh Nguyen discovered an arbitrary file write flaw in rclone's local backend. With the --links flag, rclone stores symlinks as .rclonelink text files holding the target path, and when syncing from a remote it calls os.Symlink() on that target without validating it. A malicious remote can therefore supply a .rclonelink whose target is an absolute path or a ../ traversal, so rclone creates a symlink that escapes the destination directory and later writes land on files like ~/.ssh/authorized_keys, shell startup files, or cron jobs — giving the attacker code execution as the victim user. It affects rclone through v1.74.3; upgrading to v1.74.4 fixes it.