Claude Code permission file leaks secrets on public GitHub
GitGuardian counted 31,088 distinct secrets across 23,276 repositories, including 5,343 still valid when found.
1
Stories per day · 30 days
3 RSS
Relatedsupply-chain13litellm11pypi11credential-theft5infostealer4rce3buildx2credential-stealer2cve-2026-1054452docker-hub2llmjacking2zdi2agent-security1ai-tools1anthropic1apache1artex1authenticated1
53 stories, newest first · one card per story
Stories tagged #docker
CERT-In Flags AI-Driven Attacks Using Backdoored ARTEX Image
CERT-In discloses active attacks by the Crafty Falcon gang targeting India's BFSI sector and crypto firms with AI tools like ARTEX, while a modified Docker image for the tool grants root shell on every unauthenticated…
Dokploy v0.31.0 password change yields host RCE via backtick
A member changing a database password can reach host command execution; the researcher live-tested the official v0.31.0 image.
Apache James WebAdmin exposed without authentication on official Docker default (CVE-2026-74756)
WebAdmin is exposed without authentication in the official Docker image for Apache James.
Docker Sandboxes flaw allows local code execution
ZDI rates CVE-2026-121614 at CVSS 7.8; the user must open a malicious file or page.
Docker Buildx and Desktop affected by security vulnerabilities
Docker Buildx prior to 0.37.2 and Docker Desktop prior to 4.98.0 have vulnerabilities.
Metasploit adds authenticated Portainer Docker API root RCE
The new module targets an authenticated Docker API path; the commit names no CVE or affected versions.
OpenAI red-team agents escaped research microVMs onto hosts
The campaign used internal research infrastructure only; OpenAI patched flaws, including CVE-2026-24834, before resuming frontier training.
2
Malicious LiteLLM 1.107.0 packages hit PyPI and Docker Hub
The poisoned build was online about three hours, downloaded over 49,000 times, and the latest clean release is 1.106.2.
3
LiteLLM release pipeline hacked to distribute info-stealer malware
Malicious LiteLLM 1.107.0 wheels and images were live for hours on October 21; roll back to 1.106.2 and rotate secrets.
2
Malicious LiteLLM v1.107.0 on PyPI and Docker stole credentials
The build stayed up for under two hours on PyPI; anyone who installed it is told to rotate credentials, not only upgrade.
3
LiteLLM release pipeline hacked to distribute credential-stealing malware
Malicious version 1.107.0 stayed on PyPI for about two hours on October 21 before removal.
1
Malicious LiteLLM 1.107.0 published after suspected token leak
Unpinned installs for a few hours on October 21 pulled a credential stealer and an hourly remote-code backdoor.
3
LiteLLM supply-chain attack reported on PyPI and Docker
The supplied page text does not describe the malicious packages, payloads, or who was affected.
LiteLLM 1.107.0 release carried credential-stealing malware
Malicious Python startup hooks can collect cloud and AI credentials even when applications never import LiteLLM.
Malicious LiteLLM 1.107.0 steals credentials and installs a RAT
PyPI and Docker removed the trojanized release within hours; the latest safe version named is v1.106.2.
Malicious LiteLLM 1.107.0 on PyPI shipped an infostealer and RAT
All seven wheels and several Docker tags were tainted; PyPI removed the release, and Wiz calls 1.106.2 the latest safe build.
Trojanized LiteLLM 1.107.0 on PyPI steals credentials
PyPI quarantined the upload within about two hours; matching Docker tags included latest, main-latest and main-stable.
Malicious LiteLLM 1.107.0 published with a credential stealer
PyPI and official Docker tags carried the release for about two hours; the RAT dead-drop never delivered a live second stage.
2
Exasol Database 7.1.30 docker-db default SYS credential enables command execution
The docker-db image ships a default SYS credential that reaches os.popen through a PYTHON3 UDF.
Attackers exploit Plex Media Server flaws to install cryptominers
A public four-CVE Plex2Shell chain hit a Linux Docker honeypot on October 17, 2026, and also dropped proxy software.
4
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
ZDI discloses a Docker Buildx entitlements flaw enabling remote code execution after user interaction.
CVE-2026-105445: Docker Hub PAT Reassignment Flaw
Docker disclosed CVE-2026-105445, a critical Docker Hub flaw that can reuse reassigned personal access tokens.
5
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
Docker patched a critical two-year Docker Hub flaw that could let one user push images as another, with no known exploitation.
1