prolix-oc

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

prolix-oc records in CISA KEV

No prolix-oc vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-32384 CVE-2026-44444

Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan

HIGH 80

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0037 Published 2026-05-26 Fixed in 0.9.7 CWE-78

TI-2026-32391 CVE-2026-44451

Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass

HIGH 75

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.0023 Published 2026-05-26 Fixed in 0.9.7 CWE-693

TI-2026-32389 CVE-2026-44449

Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape

HIGH 74

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00451 Published 2026-05-26 Fixed in 0.9.7 CWE-88

TI-2026-32383 CVE-2026-44443

Lumiverse: Sign-up nonce race condition allows unauthorized account registration

MEDIUM 55

Lumiverse is a full-featured AI chat application.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00118 Published 2026-05-26 Fixed in 0.9.7 CWE-362

TI-2026-32390 CVE-2026-44450

Lumiverse: RCE via MCP stdio argument injection

MEDIUM 43

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00377 Published 2026-05-26 Fixed in 0.9.7 CWE-88

Open these records in search →