SmythOS vulnerabilities

Products

• sre 2

Latest SmythOS CVEs

Newest publication first

1. CVE-2026-7022 SmythOS sre HTTP Header AgentRuntime.class.ts AgentRuntime improper authentication

   Published 2026-04-26

   Medium·CVSS 6.9 EPSS 0.38%

   A security vulnerability has been detected in SmythOS sre up to 0.0.15. Affected is the function AgentRuntime of the file packages/core/src/subsystems/AgentManager/AgentRuntime.class.ts of the component HTTP Header Handler. Such manipulation of the argument X-DEBUG-RUN/X-DEBUG-IN...

2. CVE-2026-7021 SmythOS sre Connector Service utils.ts information disclosure

   Published 2026-04-26

   Medium·CVSS 5.1 EPSS 0.18%

   A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.