Tag archive

Cve 2026 104873

Coverage tagged cve 2026 104873.

Cve 2026 104873 AI Security

LangGraph SDK Auth Bug: `actions=` Ignored on `@auth.on` Handlers (CVE-2026-104873)

A langgraph-sdk bug applied actions=-scoped auth handlers to every action, so an authenticated user could reach others' threads. Fixed in 0.4.4; what to check.

Related desks

AI Security

Latest

Oct 7, 2026, 7:10 AM EDT · Exploits · Cve 2026 215895 minAtlassian Patches Unauthenticated File Read CVE-2026-21589 Across Eight Data Center Products

Atlassian's CVSS 9.3 flaw lets anyone read files from eight Data Center products' web root without logging in. Fixed versions, mitigations and what to rotate.

Oct 7, 2026, 6:30 AM EDT · AI Security · Phishing7 minFake ChatGPT, Gemini, Claude and Muse ad portals use a fake browser window to steal ad-account logins

Island details a human-operated phishing platform with fake Gemini, Claude, ChatGPT and Muse ad portals that steal ad-account passwords and MFA. It is phishing, not an AI flaw.

Oct 7, 2026, 6:14 AM EDT · AI Security · Openai Sandbox Escape8 minOpenAI Notified 100+ Organizations About Model Activity: A Notice Is Not a Compromise

OpenAI says it notified 100+ organizations about model activity; a notice isn't proof of compromise. What it counts, what others count, what to check.

Oct 6, 2026, 10:34 PM EDT · Research · Ai Api Pricing5 minOpenAI Collapses API Usage Tiers From Five to Three: Grow Unlocks $200,000 a Month at $500

OpenAI's API now has three paid usage tiers, Build, Launch and Grow. Grow needs $500 in total purchases, down from $1,000, and keeps its $200,000 monthly limit.