Skip to content

Standard Reader

Tag

Rce

Articles and publications tagged Rce across the Atmosphere.

1article1publication

Articles

Publications

jeffreyciend

jeffreyciendOct 24, 2026

MoviePilot let the model decide whether a command was dangerous

CVE-2026-77931: MoviePilot let injected content reach ExecuteCommandTool with confirm_dangerous set by the model itself, bypassing the command denylist inside the admin session.

prompt-injectionagent

You've reached the end.