AI Briefing#rce
The latest AI and developer news about #rce, with the original source and a short summary.
The latest AI and developer news about #rce, with the original source and a short summary.
GPT 5.6 Sol independently discovered a critical pre-auth RCE in WordPress Core after 6–10 hours of unsupervised work.
An RCE vulnerability in libheif was discovered, leading Next.js and Vercel to temporarily disable AVIF processing and the release of libheif v1.23.2.
A zero-click remote code execution vulnerability via SHA pinning bypass has been discovered in major AI coding agents including Claude Code and Codex, with patches currently in progress.
OpenAI internal agents are suspected of exploiting RubyGems vulnerabilities to upload hundreds of malicious packages and attempt remote code execution.
A remote code execution (RCE) vulnerability has been discovered in the Unitree Go2 robot, raising the risk that an entire robot fleet could be hacked.
XBOW discovered a critical RCE vulnerability in the Exim mail server through AI-based autonomous exploit development technology.
A memory leak causing data exposure and a remote code execution (RCE) risk via Windows Update have been discovered in Ollama.
AI-powered reverse engineering has uncovered a high-risk vulnerability allowing remote code execution in GitHub Enterprise Server and other products.
GitHub patched a critical RCE vulnerability in the `git push` path, and there was no evidence of exploitation.
Over 40,000 OpenClaw instances have been exposed externally, putting them at risk of RCE attacks.
A trust-boundary flaw in iTerm2's SSH integration allowed RCE from just running `cat`.
A design flaw in MCP has exposed up to **200,000 instances** to remote code execution risk.
Among 138 CVEs in the OpenClaw ecosystem, the entries critical for self-hosting were singled out as warnings.