RosmarOps Observatory
Agent security, day by day
What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.
CVE-2026-76894, published in NVD on 3 November 2026, affects CKAN MCP Server before 0.4.112: its DataStore table interface accepts window messages without checking their origin.
CVE-2026-116635, published in NVD on 2 November 2026, affects AWS Serverless MCP Server before 0.2.1: path traversal in its deployment status component reaches JSON files outside its directory.
CVE-2026-120323, published in NVD on 2 November 2026, affects MCPHub, an MCP server hub, up to 1.0.45 and 1.1.7: its passthroughHeaders parameter allows information disclosure; 1.1.8 fixes it.
No security changes found in the sources we checked.
CVE-2026-62863, published in NVD on 30 October 2026, affects MoLing, an MCP server, before version 0.5.0: in SSE mode its endpoints accept requests without authentication.
No changes found in the 14 sources checked today. Not checked: OpenAI Codex.
From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.