CVE-2026-59821
Named by 2 kept items in this workspace.
Search every workspace for CVE-2026-59821. It matches the name as written, so it can find other things that share it.
The items that name it 2
Post-auth root-level code execution via Custom Code Guardrails registration endpoint (POST /guardrails), which lacked the forbidden-patterns check and builtins stripping applied by the test endpoint, allowing arbitrary Python execution (e.g. import os; os.popen('id')) at guardrail registration time.
All cves in this workspace.