ThreatVectr
Tag

#Python

4 stories taggedPython.

Illustration: a dimly lit developer workstation at night
Identity & Access

A flaw in the official MCP Python SDK let hostile servers walk off with OAuth logins

Applications built on Anthropic's Model Context Protocol client library could be tricked into sending real service credentials to an attacker-controlled endpoint. The fix is in version 1.30.0.

4 min read
Illustration: A developer's workspace with a Jupyter-
Vulnerabilities

Marimo Patches Notebook Flaw That Let Hidden Commands Run on Open

A high-severity bug in the Marimo notebook app could quietly run attacker-supplied commands the moment a user opened a booby-trapped file in edit mode.

3 min read
A security professional reviewing documentation and checklists on a desk, with a laptop displaying OWASP guidelines and AI security frameworks on the screen
AI Security

OWASP Publishes First Security Watchlist for AI Agent 'Skills'

A real attack in July exposed more than 300,000 users to stolen credentials through fake AI skills. Now the group behind the web's most-used security checklists has named the top ten risks, and 'malicious skills' sits at number one.

4 min read
Illustration: a circuit board with glowing green data pathways running across its surface
AI Security

Silent RCE in Hugging Face Transformers Hides Behind a Single Config Field

CVE-2026-4372 lets an attacker own any machine that loads a poisoned model. No warnings, no prompts, no trace. The trust_remote_code flag turned out to be decorative.

3 min read
© 2026 Threat Vectr