RosmarOps

RosmarOps Observatory

Agent security today: 3 November 2026

What changed in the security of the AI coding agents we follow since the last check, from their official sources and public registries. Up to five changes a day, one line each, with its source. Days without changes are listed too.

  1. 2 November 2026 · AWS Serverless MCP Server · CVE-2026-116635

    CVE-2026-116635, published in NVD on 2 November 2026, affects AWS Serverless MCP Server before 0.2.1: path traversal in its deployment status component reaches JSON files outside its directory.

    nvd.nist.gov

  2. 2 November 2026 · @ifasn/*-doc-mcp (npm) · MAL-2026-18486

    OSV published MAL-2026-18486 to MAL-2026-18489 on 2 November 2026: four npm packages under @ifasn, presented as Markdown MCP servers, query cloud metadata services at startup.

    osv.dev

  3. 2 November 2026 · CrewAI · CVE-2026-120630

    CVE-2026-120630, published in NVD on 2 November 2026, affects CrewAI: its SSRF guard and request client miss malicious URLs, reachable through its website scraping tool; NVD lists no fixed version.

    nvd.nist.gov

  4. 3 November 2026 · Claude Code

    Claude Code 2.1.317, dated 3 November 2026 in its changelog, now asks for confirmation before web or shell tool calls send the account email address over the network.

    code.claude.com

Checked today: 27 of 28 sources. Not checked: Hermes Agent.

What we checked

From the vendors' official sources and public registries, each line with its date and source. Not a security guarantee or advice.