CyberSecBulletin

Jaylfc vulnerabilities

We track 2 vulnerabilities in Jaylfc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Jaylfc vulnerabilities

  • 8.3 High severity

    taOS: Missing Authorization

    CVE-2026-67548Jaylfc

    taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.25, tinyagentos (taOS) registers all system settings routes under a single APIRouter() instance created with no admin authorization dependency. Any authenticated user—including non-admin invited us

  • 8.8 High severity

    taOS: Missing Authorization

    CVE-2026-67547Jaylfc

    taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/{skill_id}/call endpoint in taOS executes built-in skills — including the code_exec skill which runs arbitrary Python via subprocess.run(["python3", "-c", code]) — with