CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
- ID
- 20951
- Status
- summarized
- Published
- 03 Sep 2026, 1:19 PM
- Fetched
- 03 Sep 2026, 3:09 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 5.5
- Created
- 03 Sep 2026, 3:10 PM
- Tags
- Audience
- developersai_agent_users
What happened
CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, including a CVSS 10.0 SSRF and a 7.8 OS command injection in SonicWall SMA 1000, a 9.8 improper authentication flaw in JFrog Artifactory allowing unauthenticated admin access under default config, a 6.5 HTTP request smuggling issue in Kludex Starlette, a 10.0 unauthenticated workflow execution flaw in Kestra OSS, and an 8.8 improper authentication bug in Berri LiteLLM's MCP Streamable HTTP endpoint that lets an unauthenticated attacker establish an authenticated MCP session with an arbitrary Bearer token.
Why it matters
If you run JFrog Artifactory with default configuration, patch immediately—unauthenticated network access yields admin privileges. If you expose LiteLLM's MCP Streamable HTTP endpoint in an AI agent stack, an attacker can hijack an authenticated MCP session with any Bearer token, which is critical for anyone building MCP-based agent tooling. Starlette users should check whether their auth depends on reconstructed URL paths, as request smuggling can bypass it.
Discussion angle
The LiteLLM MCP auth bypass is the first widely-catalogued exploited flaw in MCP infrastructure—worth discussing whether your agent tooling treats MCP session tokens as trusted and what authentication boundaries you actually enforce on MCP endpoints.