RosmarOps

RosmarOps Observatory

Agent security today: 31 October 2026

What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.

  1. 30 October 2026 · MoLing (MCP server) · CVE-2026-62863

    CVE-2026-62863, published in NVD on 30 October 2026, affects MoLing, an MCP server, before version 0.5.0: in SSE mode its endpoints accept requests without authentication.

    nvd.nist.gov

  2. 30 October 2026 · DBHub (MCP server) · CVE-2026-61789

    CVE-2026-61789, published in NVD on 30 October 2026, affects DBHub, an MCP server, before version 0.22.6: its read-only check can be bypassed on MySQL and MariaDB.

    nvd.nist.gov

  3. 31 October 2026 · Claude Code

    Claude Code 2.1.316, dated 31 October 2026: server-managed settings for Team and Enterprise logins now apply without an approval prompt, according to its changelog.

    code.claude.com

  4. 31 October 2026 · Claude Code

    Claude Code 2.1.316, dated 31 October 2026, fixes PowerShell hooks that did not block on exit code 2 when the command started with a type cast.

    code.claude.com

  5. 31 October 2026 · Claude Code

    Claude Code 2.1.316, dated 31 October 2026, fixes restricted sessions that uploaded files from outside the working directories when a Read allow rule covered them.

    code.claude.com

What we checked

From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.