The Lab · 2026-03-30 19:27:18 · GitHub Issues
A critical security vulnerability in OpenAI's command-line interface (CLI) tool, specifically within its onboarding module, exposed systems to local attacks. The flaw resided in six functions that created temporary files using predictable names based on `Date.now()` and `Math.random().toString(36)`. This predictability...
The Lab · 2026-05-08 18:24:41 · Unit 42
Security researchers at Unit 42 have disclosed a critical Linux kernel local privilege escalation vulnerability, designated CVE-2026-31431 and internally named "Copy Fail," which grants attackers stealthy root access to affected systems. The flaw, classified as critical severity, is being described as one of the most s...
The Lab · 2026-05-11 08:10:35 · GitHub Issues
A high-severity local privilege escalation vulnerability in the Linux kernel's `algif_aead` module has been flagged under active exploitation, prompting urgent inclusion in the CISA Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-31431 with a CVSS score of 7.8, the flaw allows an unprivileged local user to...