Apache Oozie workflow rerun bypasses ACL and reassigns ownership
Authenticated Oozie users can reconfigure other tenant's workflows and change ownership in all versions (CVE-2026-119641).
Stories per day · 30 days
2 RSS
Relatedacl1advisory1apache1cccs1claude-code1coding-agents1developer-tools1environment-variables1exposure1n8n1oozie1sql-injection1trigger.dev1
14 stories, newest first · one card per story
Stories tagged #workflow
Trigger AI workflow tool exposes environment variables
Trigger.dev disclosed that an attacker gained unauthorized access to environment variables belonging to a subset of its customers.
1
Superlite plugin runs Claude Code builds after one approval
The author’s workflow plugin plans parallel tasks, assigns cheaper agents, and records decisions instead of asking at every step.
2
n8n security advisory (AV26-1044)
Canada’s Cyber Centre urges updates for n8n SQL injection and workflow credential-check flaws.
CVE-2026-66082: Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）
DolphinScheduler before 3.4.3 allows cross-project changes to schedules, workflows, and task instances.
Restate lands $20M as the need for durable infrastructure increases with AI agents
Berlin-based Restate raised $20 million to expand durable execution infrastructure for AI agent workflows.
CVE-2026-71898: Apache DolphinScheduler: Improper Authorization Allows Project Read-Only Users to Execute Workflows and Tamper with Workflow Definitions
CVE-2026-71898 lets DolphinScheduler read-only users modify workflows through a missing authorization check.
ControlScope: Workflow Revision and Reliability in LLM Agents
ControlScope finds only small, mixed gains from revising more of a running LLM-agent workflow.
[20260910] - Core - Improper ACL checks for workflow stage changes
Joomla workflow stage changes lack ACL checks on inaccessible content; fixed in 5.4.9 and 6.1.4.
Shopify CEO says employees' 'slop grenades' are making more work for everyone
Shopify CEO warns that lazy use of AI tools creates 'slop grenades' that burden colleagues with cleanup work.
1
Embodied-BenchForge: A Closed-Loop Agentic Workflow for Embodied Benchmark Construction
Embodied-BenchForge automates embodied benchmark construction via closed-loop synthesis with verification and repair, yielding seven benchmarks for MLLM evaluation.
Rebuilding AUTOMATIC1111 with Gradio Workflow
Hugging Face demonstrates rebuilding the AUTOMATIC1111 Stable Diffusion web interface using its Gradio Workflow framework.
MOONWALK: Mediating Operations with Intent-Evidence-Action Alignment Across Junior-Supervisor Review Workflows in Animation/VFX Pre-Production
MOONWALK introduces an intent-evidence-action alignment workflow for animation/VFX reviews where AI handles administrative coordination while artists keep creative authority.
A Detection Engineer's Guide for Delegating Work to AI
Huntress argues detection engineers should only delegate security work to AI when outputs can be independently verified.