{
 "schema": "afk-headlines/v1",
 "title": "Agent Field Kit cyber-defense advisory headlines",
 "home_page_url": "https://agentfieldkit.com/agents/cyber",
 "updated": "2026-10-22T00:00:00Z",
 "license": "Free to read, quote with a link, and use in your own agents. Attribution: Agent Field Kit.",
 "items": [
  {
   "id": "afk-2026-10-21-litellm-1-107-0",
   "title": "LiteLLM 1.107.0 on PyPI and Docker contained a credential stealer and backdoor",
   "published": "2026-10-21T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "OSV / OpenSSF malicious-packages (MAL-2026-2144)",
     "rating": "malicious",
     "basis": "Confirmed malicious code"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "critical",
     "basis": "Code execution at interpreter start plus credential theft"
    }
   ],
   "components": [
    "package:pypi/litellm",
    "framework:litellm-proxy",
    "framework:crewai",
    "framework:autogen",
    "framework:langchain",
    "framework:openai-agents-sdk",
    "framework:dspy",
    "bot:cursor",
    "bot:claude-code",
    "bot:openclaw"
   ],
   "first_step": "Check: pip show litellm; look for litellm-1.107.0.dist-info, cook.pth and sitecustomize.py in site-packages. Not finding them does not prove an environment is clean.",
   "source": "https://docs.litellm.ai/blog/security-incident-oct-21-2026",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-21-litellm-1-107-0"
  },
  {
   "id": "afk-2026-10-21-railway-env-vars",
   "title": "Railway: customer environment variables may have been accessed and some decrypted",
   "published": "2026-10-21T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "high",
     "basis": "Credential exposure; decryption confirmed for some variables; no CVSS issued"
    }
   ],
   "components": [
    "platform:railway",
    "bot:any-hosted-on-railway",
    "framework:any"
   ],
   "first_step": "Roll every environment variable stored in Railway, including API keys and private registry credentials.",
   "source": "https://blog.railway.com/p/security-disclosure-wednesday-october-21st",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-21-railway-env-vars"
  },
  {
   "id": "afk-2026-10-22-agent-skill-packages-malware",
   "title": "Agent skill packages flagged as malware on npm (opencode-skills-collection, agentic-awesome-skills, x402-prompt-injection-scan), plus an 'aanthropic' typosquat on PyPI",
   "published": "2026-10-22T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "GitHub advisories (malware) / OpenSSF malicious-packages",
     "rating": "malicious",
     "basis": "Listed as malware; GitHub advises treating affected hosts as fully compromised"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "high",
     "basis": "Installed by coding-agent users on machines that hold agent and provider keys; technical details not yet published"
    }
   ],
   "components": [
    "package:npm/opencode-skills-collection",
    "package:npm/agentic-awesome-skills",
    "package:npm/x402-prompt-injection-scan",
    "package:pypi/aanthropic",
    "bot:opencode",
    "bot:claude-code",
    "bot:cursor",
    "framework:agent-skills"
   ],
   "first_step": "Check every project and global install: npm ls -g opencode-skills-collection agentic-awesome-skills x402-prompt-injection-scan, the same without -g in each project, and pip show aanthropic.",
   "source": "https://github.com/advisories/GHSA-rgwm-3jj9-h563",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-agent-skill-packages-malware"
  },
  {
   "id": "afk-2026-10-22-nextjs-16-4-1-rce",
   "title": "Next.js: two critical unauthenticated RCEs fixed in 16.4.1 and 15.5.28 (now flagged by dependency scanners)",
   "published": "2026-10-14T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "Next.js / GitHub advisories GHSA-673q-mjm6-r5xr, GHSA-2464-fhr4-w9xw",
     "rating": "critical",
     "basis": "CVSS 9.5; unauthenticated; preconditions apply (Cache Components 'use cache'; SVG image optimization on glibc Linux)"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "high",
     "basis": "Common front end for agent apps, and its server holds model keys; preconditions limit exposure"
    }
   ],
   "components": [
    "package:npm/next",
    "package:npm/sharp",
    "framework:nextjs",
    "platform:vercel",
    "platform:self-hosted"
   ],
   "first_step": "Upgrade next to 16.4.1 (16.x) or 15.5.28 (15.x), then rebuild and redeploy.",
   "source": "https://nextjs.org/blog/nextjs-security-update-october-14-2026",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-nextjs-16-4-1-rce"
  },
  {
   "id": "afk-2026-10-22-vllm-0-31-0",
   "title": "vLLM before 0.31.0: remote code execution when trust_remote_code is on, plus cache and crash flaws",
   "published": "2026-10-21T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "GitHub advisory GHSA-f623-hjm8-5wg5",
     "rating": "critical",
     "basis": "CVSS 8.1; RCE requires trust_remote_code and attacker control of a model revision"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "high",
     "basis": "Self-hosted inference servers; preconditions limit exposure"
    }
   ],
   "components": [
    "package:pypi/vllm",
    "framework:vllm",
    "platform:self-hosted-inference"
   ],
   "first_step": "Upgrade vLLM to 0.31.0 or later now.",
   "source": "https://github.com/advisories/GHSA-f623-hjm8-5wg5",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-vllm-0-31-0"
  },
  {
   "id": "afk-2026-10-22-mcp-ts-sdk-1-32-0",
   "title": "MCP TypeScript SDK: five fixes for HTTP servers and clients (upgrade to 1.32.0 / 2.3.0)",
   "published": "2026-10-20T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "GitHub advisories (5)",
     "rating": "high",
     "basis": "3 high, 2 medium"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "high",
     "basis": "Remote MCP servers are a core agent surface; cross-client data leak and token audience bypass"
    }
   ],
   "components": [
    "package:npm/@modelcontextprotocol/sdk",
    "package:npm/@modelcontextprotocol/server",
    "package:npm/@modelcontextprotocol/client",
    "framework:mcp-client",
    "framework:mcp-server"
   ],
   "first_step": "Upgrade @modelcontextprotocol/sdk to 1.32.0, or @modelcontextprotocol/server and client to 2.3.0, then redeploy.",
   "source": "https://github.com/advisories/GHSA-jm63-cq47-j5jp",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-mcp-ts-sdk-1-32-0"
  },
  {
   "id": "afk-2026-10-22-nodejs-oct-21-security-release",
   "title": "Node.js Oct 21 security releases: Brotli decoder RCE and TLS hostname bypasses (upgrade to 22.23.4 / 24.22.1 / 26.12.1)",
   "published": "2026-10-21T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "Node.js project",
     "rating": "high",
     "basis": "Highest severity in this release is HIGH"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "high",
     "basis": "Runtime under most JS MCP servers and agent tools"
    }
   ],
   "components": [
    "runtime:nodejs",
    "framework:mcp-server",
    "framework:mcp-client",
    "bot:any-node-based"
   ],
   "first_step": "Upgrade Node.js to 22.23.4, 24.22.1 or 26.12.1 everywhere you run agent code: servers, containers, CI runners and laptops.",
   "source": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-nodejs-oct-21-security-release"
  },
  {
   "id": "afk-2026-10-22-pyjwt-2-14-gitpython-3-2-1",
   "title": "Python agent tooling: PyJWT 2.14.0 (forged tokens via empty-key JWK) and GitPython 3.2.1 (submodule hook RCE)",
   "published": "2026-10-22T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "GitHub advisory GHSA-pxh4-856f-4h89",
     "rating": "high",
     "basis": "CVSS 7.4; JWK/JWKS HMAC verification path only"
    },
    {
     "source": "GitHub advisory GHSA-83vg-56qc-22m7",
     "rating": "high",
     "basis": "CVSS 7.5; needs attacker-influenced submodule path/URL"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "medium",
     "basis": "Configuration-dependent; easy upgrades"
    }
   ],
   "components": [
    "package:pypi/pyjwt",
    "package:pypi/gitpython",
    "framework:mcp-server",
    "framework:fastapi",
    "bot:any-python-coding-agent"
   ],
   "first_step": "Upgrade pyjwt to 2.14.0 and GitPython to 3.2.1, then redeploy.",
   "source": "https://github.com/advisories/GHSA-pxh4-856f-4h89",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-pyjwt-2-14-gitpython-3-2-1"
  },
  {
   "id": "afk-2026-10-22-goose-terminal-history",
   "title": "Goose: terminal integration can send shell history, including typed secrets, to your model provider",
   "published": "2026-10-22T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "GitHub advisory GHSA-4537-c6fq-qchm (unreviewed)",
     "rating": "high",
     "basis": "CVSS 7.4"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "medium",
     "basis": "Needs the feature on and secrets typed into the shell"
    }
   ],
   "components": [
    "bot:goose",
    "framework:goose"
   ],
   "first_step": "Turn off Goose terminal integration until a fixed release is confirmed.",
   "source": "https://github.com/advisories/GHSA-4537-c6fq-qchm",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-goose-terminal-history"
  },
  {
   "id": "afk-2026-10-22-agent-sdk-fixes-openclaw-a2a",
   "title": "Agent SDK fixes: OpenClaw 2026.6.6 (browser policy bypass) and A2A Java SDK 1.3.x (auth, SSRF, credential leaks)",
   "published": "2026-10-21T00:00:00Z",
   "updated": "2026-10-22T00:00:00Z",
   "severity": [
    {
     "source": "GitHub advisories",
     "rating": "high",
     "basis": "Highest: CVE-2026-111764 and CVE-2026-111765"
    },
    {
     "source": "Agent Field Kit (editorial)",
     "rating": "medium",
     "basis": "Narrower install base; configuration-dependent"
    }
   ],
   "components": [
    "bot:openclaw",
    "package:npm/openclaw",
    "package:maven/org.a2aproject.sdk",
    "framework:a2a"
   ],
   "first_step": "Upgrade OpenClaw to 2026.6.6 or later and restart the gateway.",
   "source": "https://github.com/advisories/GHSA-3x84-qq85-fj65",
   "url": "https://agentfieldkit.com/agents/cyber#afk-2026-10-22-agent-sdk-fixes-openclaw-a2a"
  }
 ],
 "full_detail": {
  "mcp": "https://agentfieldkit.com/mcp",
  "tools": [
   "changes_since",
   "get_advisory",
   "search_advisories"
  ],
  "note": "Fix-it briefs (patch status, am I affected, exact steps, verify) and stack alerts need a Cyber Desk key.",
  "pricing": "https://agentfieldkit.com/pricing#cyber"
 },
 "other_formats": {
  "rss": "https://agentfieldkit.com/agents/cyber/rss.xml",
  "json_feed": "https://agentfieldkit.com/agents/cyber/feed.json",
  "atom": "https://agentfieldkit.com/agents/cyber/feed.xml",
  "llms": "https://agentfieldkit.com/agents/cyber/llms.txt"
 }
}