| ... |
|
ATR-2026-00040-privilege-escalation.yaml
|
7.11 KB |
|
ATR-2026-00041-scope-creep.yaml
|
7.36 KB |
|
ATR-2026-00107-delayed-execution-bypass.yaml
|
3.89 KB |
|
ATR-2026-00110-eval-injection.yaml
|
4.64 KB |
|
ATR-2026-00111-shell-escape.yaml
|
6.64 KB |
|
ATR-2026-00112-dynamic-import-exploitation.yaml
|
4.56 KB |
|
ATR-2026-00143-casual-privilege-escalation.yaml
|
4.32 KB |
|
ATR-2026-00144-rationalized-safety-bypass.yaml
|
4.13 KB |
|
ATR-2026-00204-stealth-execution-persistence.yaml
|
5.05 KB |
|
ATR-2026-00436-enclave-vm-sandbox-escape-rce.yaml
|
6.67 KB |
|
ATR-2026-00441-semantic-kernel-sessions-python-plugin-startup-persistence.yaml
|
8.52 KB |
|
ATR-2026-00451-litellm-admin-sqli-cisa-kev.yaml
|
8.48 KB |
|
ATR-2026-00528-praisonai-auth-disabled-default.yaml
|
5.44 KB |
|
ATR-2026-00539-crewai-codeinterpreter-sandbox-escape-rce.yaml
|
9.43 KB |
|
ATR-2026-00546-crewai-json-loader-local-file-read.yaml
|
6.01 KB |
|
ATR-2026-00547-crewai-rag-url-ssrf-bypass.yaml
|
6.23 KB |
|
ATR-2026-00549-destructive-tool-without-human-approval.yaml
|
6.75 KB |
|
ATR-2026-00551-cross-conversation-memory-write.yaml
|
7.91 KB |
|
ATR-2026-01600-sql-injection-tautology-rbac-bypass.yaml
|
3.28 KB |
|
ATR-2026-01601-sql-injection-destructive-ddl.yaml
|
3.54 KB |
|
ATR-2026-01602-sql-injection-union-select-exfil.yaml
|
3.02 KB |
|
ATR-2026-01603-sql-injection-stacked-dml-abuse.yaml
|
3.37 KB |
|
ATR-2026-01604-sql-injection-schema-enumeration.yaml
|
3.14 KB |
|
ATR-2026-01609-shell-injection-exfil-webhook.yaml
|
4.27 KB |
|
ATR-2026-01610-shell-evasion-subshell-injection.yaml
|
4.13 KB |
|
ATR-2026-01611-shell-evasion-eval-exec-injection.yaml
|
4.42 KB |
|
ATR-2026-01612-debug-mode-privilege-escalation.yaml
|
4.11 KB |
|
ATR-2026-01613-rbac-bypass-social-engineering.yaml
|
5.73 KB |
|
ATR-2026-01614-bola-cross-user-data-access.yaml
|
5.11 KB |
|
ATR-2026-01615-sandbox-escape-command-injection.yaml
|
3.78 KB |
|
ATR-2026-01616-path-traversal-agent-file-access.yaml
|
3.04 KB |
|
ATR-2026-01802-asb-backdoor-surveillance-implant.yaml
|
5.39 KB |
|
ATR-2026-01803-asb-covert-server-intrusion.yaml
|
6.38 KB |
|
ATR-2026-01808-asb-synthetic-pan-payment-probe.yaml
|
4.54 KB |
|
ATR-2026-01899-remote-access-backdoor.yaml
|
3.12 KB |
|
ATR-2026-01933-litellm-user-role-privilege-escalation-cve-2026-47102.yaml
|
5.14 KB |
|
ATR-2026-01934-litellm-allowed-routes-authz-bypass-cve-2026-47101.yaml
|
5.29 KB |
|
ATR-2026-01949-praisonai-mcpserver-unauth-tools-call.yaml
|
5.47 KB |
|
ATR-2026-01974-anything-llm-data-import-access-control.yaml
|
4.38 KB |
|
ATR-2026-01981-network-ai-approval-inbox-unauth-cors-bypass.yaml
|
5.58 KB |
|
ATR-2026-01986-windows-mcp-unauth-http-powershell-cors.yaml
|
6.57 KB |
|
ATR-2026-01992-t1556-agent-auth-process-tamper.yaml
|
3.47 KB |
|
ATR-2026-02040-file-edit-tool-persistence-write.yaml
|
5.63 KB |
|
ATR-2026-02100-cypher-destructive-admin-query-injection.yaml
|
6.24 KB |
|
ATR-2026-02101-dynamic-dunder-attribute-sandbox-escape.yaml
|
5.62 KB |
|
ATR-2026-02123-bare-query-path-confusion-auth-bypass.yaml
|
5.78 KB |
|
ATR-2026-02142-download-tool-absolute-path-sandbox-escape.yaml
|
6.47 KB |
|
ATR-2026-02146-export-tool-dest-dir-credential-directory-redirect.yaml
|
5.06 KB |
|
ATR-2026-02192-self-privesc-wildcard-trust-config-write.yaml
|
6.05 KB |
|
ATR-2026-02195-dangerous-env-var-injection-config-tool.yaml
|
6.12 KB |
|
ATR-2026-02251-identifier-field-path-traversal-storage-write.yaml
|
4.55 KB |
|
ATR-2026-02300-mcp-stdio-config-dangerous-env-var.yaml
|
8.61 KB |
|
ATR-2026-02301-symlink-outside-workspace-sensitive-target.yaml
|
6.45 KB |
|
ATR-2026-02302-git-worktree-dotgit-sandbox-escape.yaml
|
4.93 KB |
|
ATR-2026-02353-runtime-identifier-field-path-traversal-log-read.yaml
|
6.35 KB |
|
ATR-2026-02370-ssh-scp-hostalias-option-injection.yaml
|
6.08 KB |
|
ATR-2026-02371-chromium-launch-flag-argument-injection.yaml
|
6.76 KB |
|
ATR-2026-02402-mcp-policy-engine-fail-open.yaml
|
14.14 KB |
|
ATR-2026-02404-model-output-to-shell-unsanitized.yaml
|
10.08 KB |
|
ATR-2026-02407-agent-workspace-boundary-escape.yaml
|
12.42 KB |
|
ATR-2026-02528-tool-parameter-option-flag-smuggling.yaml
|
11.17 KB |
|
ATR-2026-02530-git-config-execution-key-set-by-agent.yaml
|
10.1 KB |
|
ATR-2026-02531-kusto-query-injection-outbound-reach.yaml
|
7.45 KB |
|
ATR-2026-02601-tool-argument-option-injection.yaml
|
12.56 KB |
|
ATR-2026-02620-dynamic-import-data-uri-module.yaml
|
10.2 KB |
|
ATR-2026-02626-agent-self-registers-mcp-server.yaml
|
9.77 KB |
|
ATR-2026-02627-web-shell-written-to-served-path.yaml
|
12.41 KB |
|
ATR-2026-02642-agent-config-tool-disables-own-guardrail.yaml
|
10.76 KB |
|
ATR-2026-02644-image-magic-polyglot-upload.yaml
|
9 KB |
|
ATR-2026-02648-readonly-graph-tool-write-procedure.yaml
|
8.4 KB |
|
ATR-2026-02664-git-identifier-field-option-injection.yaml
|
7.39 KB |
|
ATR-2026-02681-reflective-function-constructor-sandbox-escape.yaml
|
8.26 KB |
|
ATR-2026-02683-tool-argument-option-injection-executor-flag.yaml
|
8.39 KB |
|
ATR-2026-02700-percent-encoded-path-traversal-tool-argument.yaml
|
7.56 KB |
|
ATR-2026-02705-python-builtins-leak-and-prefix-check-override.yaml
|
7.1 KB |
|
ATR-2026-02708-loopback-spoofed-host-header-external-request.yaml
|
8.38 KB |
|
ATR-2026-02867-identifier-typed-tool-argument-dot-dot-path-segment.yaml
|
9.12 KB |