RosmarOps Observatory
Agent security today: 2 November 2026
What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.
CVE-2026-120323, published in NVD on 2 November 2026, affects MCPHub, an MCP server hub, up to 1.0.45 and 1.1.7: its passthroughHeaders parameter allows information disclosure; 1.1.8 fixes it.
CVE-2026-120338, published in NVD on 1 November 2026, affects prefab-ui 0.14.0 to 0.20.2: code passed to FastMCP's generate_prefab_ui MCP tool can read and write server files; 0.21.0 fixes it.
What we checked
- Claude Code · 2.1.316 · 31 October 2026
- Cursor · 20 October 2026
- OpenAI Codex · rust-v0.166.0 · 29 October 2026
- Google Antigravity · App 2.28.2 · 29 October 2026
- Hermes Agent · v0.22.5 · 23 October 2026
- GitHub Copilot · 29 October 2026
- Cline · v4.1.26 · 25 October 2026
- Continue · v2.1.0-vscode · 18 June 2026
- Kanvas · v0.4.0 · 27 October 2026
- OpenSSF malicious-packages
- Gemini CLI · v0.66.0 · 27 October 2026
- GitHub Copilot CLI · 1.0.105 · 27 October 2026
- Claude desktop · 21 October 2026
- OSV npm and PyPI
- NVD
From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.