CyberSecBulletin

Huginn vulnerabilities

We track 2 vulnerabilities in Huginn products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest Huginn vulnerabilities

  • 7.7 High severity

    huginn: Exposure of Sensitive System Information to an Unauthorized Control Sphere

    CVE-2026-127082Huginn

    Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can sup

  • 7.7 High severity

    huginn: Server-Side Request Forgery

    CVE-2026-63769Huginn

    Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, e