prolix-oc vulnerabilities

Products

• Lumiverse 5

Latest prolix-oc CVEs

Newest publication first

1. CVE-2026-44443 Lumiverse: Sign-up nonce race condition allows unauthorized account registration

   Published 2026-05-26

   Medium·CVSS 4.8 EPSS 0.12%

   Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level variable is set and unexpired. It does not validate any value from the incoming HTTP request or bind the nonce to the admin's session. If the admin's auth.api.signUp...

2. CVE-2026-44444 Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan

   Published 2026-05-26

   Critical·CVSS 9.1 EPSS 0.37%

   Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety scan (assertSafeBackendBundle). A malicious extension that ships a package.json with...

3. CVE-2026-44449 Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape

   Published 2026-05-26

   Critical·CVSS 9.1 EPSS 0.45%

   Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only validates the directory prefix. The basename is concatenated directly into the smbclient -c script withou...

4. CVE-2026-44451 Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass

   Published 2026-05-26

   Critical·CVSS 9.3 EPSS 0.23%

   Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the component override system transpiles user-supplied TSX via Sucrase and evaluates it with new Function, shadowing dangerous globals (fetch, window, eval, etc.) with undefined. A static source validator (validate...

5. CVE-2026-44450 Lumiverse: RCE via MCP stdio argument injection

   Published 2026-05-26

   Critical·CVSS 9.9 EPSS 0.38%

   Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the args array to the child process without any validation. Every binary on the allowlist accepts an in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.