Q00 vulnerabilities
We track 2 vulnerabilities in Q00 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Q00 vulnerabilities
- 8.4 High severity
ouroboros: External Control of System or Configuration Setting
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incomplete denylist. Several execution-routing keys of the same RCE class were omitted,
- 8.4 High severity
ouroboros: Untrusted Search Path
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory,