Daily Threat Briefing
← All briefings

vm2 · ChromaDB Python project · Aqara Cloud Production API

DAILY THREAT INTELLIGENCE BRIEFING Date: 2026-06-13 Prepared for: SOC Analysts | Incident Responders | Vulnerability Management | Security Leadership

EXECUTIVE SUMMARY

Today’s most operationally significant new items are: a CVSS 10.0 sandbox escape in vm2 (Node.js) enabling host-process code execution, a critical authentication bypass in SimpleHelp’s OIDC flow (covered yesterday but now with updated EPSS context), multiple critical authorization flaws in ChromaDB affecting multi-tenant deployments, and a mass compromise of over 400 Arch Linux AUR packages deploying a Rust infostealer and eBPF rootkit. The Oracle PeopleSoft KEV deadline of 2026-06-15 remains the most time-critical remediation action.

CRITICAL VULNERABILITIES

CVE-2026-47140 / CVE-2026-47210 / CVE-2026-47139 (vm2 Node.js sandbox)

  • Affected products: vm2 (patriksimek/vm2) versions prior to 3.11.4
  • Severity: CVSS 10.0 (CVE-2026-47140), 9.8 (CVE-2026-47210), 8.6 (CVE-2026-47139)
  • EPSS: 0.13 / 0.11 / 0.05 — moderate exploitation probability
  • Technical detail: Three distinct sandbox escape vulnerabilities patched together in vm2 3.11.4. CVE-2026-47140 exploits missing denylist entries for the process and inspector/promises builtins, allowing sandboxed code to reach host-side execution primitives directly. CVE-2026-47210 abuses WebAssembly JSPI (WebAssembly.promising / WebAssembly.Suspending) to bypass Promise-species hardening and expose a host-originated rejection object to attacker-controlled species logic, breaking the sandbox boundary. CVE-2026-47139 allows sandboxed code to access underscored internal HTTP builtins (_http_client, _http_server) even when public network modules are denied, enabling outbound HTTP requests and listening sockets. All three require only the ability to execute code within the vm2 sandbox. vm2 is widely used in SaaS platforms, code execution services, and plugin architectures.
  • Exploitation status: No confirmed in-the-wild exploitation at time of writing.
  • Remediation: Update vm2 to version 3.11.4 immediately. Audit all services that execute untrusted code via vm2. Consider additional OS-level sandboxing (seccomp, containers) as defense in depth.

CVE-2026-45830 / CVE-2026-45831 / CVE-2026-45832 / CVE-2026-8828 / CVE-2026-45833 (ChromaDB)

  • Affected products: ChromaDB Python project versions 0.4.17 and later; ChromaDB Rust project versions 1.0.0 and later
  • Severity: CVSS 9.4 (CVE-2026-45833), 8.8 (CVE-2026-45830, CVE-2026-45831, CVE-2026-45832, CVE-2026-8828)
  • Technical detail: A cluster of five authorization flaws affecting ChromaDB’s multi-tenant architecture. CVE-2026-45830 and CVE-2026-8828 (Python and Rust respectively) allow any authenticated user to read, write, update, or delete data in any tenant’s collection regardless of their own tenant assignment. CVE-2026-45831 (SimpleRBACAuthorizationProvider) evaluates permissions without checking which tenant, database, or collection they apply to, enabling cross-tenant actions. CVE-2026-45832 passes None for tenant and database to the authorization layer on all V1 collection endpoints, allowing complete authorization bypass via V1 API calls. CVE-2026-45833 allows code injection via a malicious model repository when trust_remote_code is set to true. ChromaDB is widely deployed as a vector database backend for AI/LLM applications. Multi-tenant deployments are fully compromised by these flaws.
  • Exploitation status: No confirmed in-the-wild exploitation; low EPSS scores, but trivial to exploit given the authorization logic failures.
  • Remediation: No patched version was specified in available advisories at time of writing. Disable multi-tenant deployments or restrict ChromaDB to single-tenant use with network-level isolation until vendor patches are available. Disable trust_remote_code where not required. Monitor vendor GitHub for patch releases.

CVE-2026-50084 / CVE-2026-50083 / CVE-2026-50085 / CVE-2026-50091 (Aqara Smart Home Platform)

  • Affected products: Aqara Cloud Production API, IAM/SSO Gateway, Board service, Aqara Home Android app (com.lumiunited.aqarahome 6.0.0)
  • Severity: CVSS 9.6 (CVE-2026-50084), 9.1 (CVE-2026-50083, CVE-2026-50091), 8.6 (CVE-2026-50085)
  • Technical detail: A chain of four vulnerabilities disclosed by runZero enables fully unauthenticated remote takeover of Aqara smart home devices. CVE-2026-50084 authorizes any valid developer token for access to any account (missing authorization, CWE-862). CVE-2026-50083 uses a hardcoded OAuth client credential in the IAM/SSO gateway (CWE-798). CVE-2026-50085 accepts arbitrary MQTT command payloads forwarded to HiveMQ without authentication. CVE-2026-50091 embeds hard-coded cryptographic keys in the Android SDK. Combined, these allow an attacker with any developer token to take over arbitrary devices. Aqara devices are deployed in both consumer and enterprise/building automation contexts.
  • Exploitation status: No confirmed exploitation; vendor patch status unclear as of 2026-04-20 disclosure date.
  • Remediation: Isolate Aqara devices from sensitive network segments. Revoke and rotate developer API tokens. Monitor vendor for patch availability. Consider disabling cloud-dependent features until remediation is confirmed.

CVE-2026-54361 / CVE-2026-54360 / CVE-2026-54358 / CVE-2026-54359 (MISP)

  • Affected products: MISP versions prior to 2.5.40
  • Severity: CVSS 8.8 (CVE-2026-54361), 8.4 (CVE-2026-54360), 7.5 (CVE-2026-54358, CVE-2026-54359)
  • Technical detail: Four vulnerabilities in MISP, the widely used open-source threat intelligence platform. CVE-2026-54361 covers mass assignment flaws in collections, tag collections, event delegations, and shadow attributes, allowing authenticated attackers to alter object ownership and access threat intelligence belonging to other organizations. CVE-2026-54360 allows an authenticated user to overwrite existing sharing groups by supplying a primary key in the create endpoint. CVE-2026-54358 allows an organization administrator to initiate password reset workflows against site administrator accounts in the same organization, enabling privilege escalation. CVE-2026-54359 documents an insecure default (Security.check_sec_fetch_site_header disabled) enabling CSRF against MISP automation endpoints. MISP is deployed extensively across European CERTs, ISACs, and enterprise security teams.
  • Exploitation status: No confirmed exploitation.
  • Remediation: Update MISP to version 2.5.40 or later. Immediately enable Security.check_sec_fetch_site_header in MISP configuration. Review sharing group integrity and organization administrator role assignments.

CVE-2026-44168 / CVE-2026-48163 / CVE-2026-48165 (MariaDB)

  • Affected products: MariaDB 10.6.x before 10.6.27, 10.11.x before 10.11.18, 11.4.x before 11.4.12, 11.8.x before 11.8.8, 12.3.x before 12.3.2
  • Severity: CVSS 8.0 (all three)
  • EPSS: 0.07 / 0.07 / 0.06
  • Technical detail: Three command injection vulnerabilities in MariaDB’s Galera cluster SST (State Snapshot Transfer) mechanism. CVE-2026-44168 and CVE-2026-48163 allow a malicious joiner node to inject arbitrary shell commands on the donor node via the mariabackup and rsync SST methods respectively, by supplying unsanitized parameters. CVE-2026-48165 allows a high-privileged MariaDB user to execute shell commands as the mariadbd process UID via wsrep_sst_receive_address or wsrep_sst_donor system variables. Galera clusters are common in high-availability MariaDB deployments.
  • Exploitation status: No confirmed exploitation.
  • Remediation: Apply MariaDB patches to the versions listed above. Restrict Galera cluster membership to trusted nodes. Limit SUPER/SYSTEM_VARIABLES_ADMIN privileges.

ONGOING

  • CVE-2026-35273 (Oracle PeopleSoft): CISA KEV deadline 2026-06-15; patch immediately, audit logs for May 27 to June 9.
  • CVE-2026-48558 (SimpleHelp): Update to 5.5.16 or later; disable OIDC as interim measure.
  • CVE-2026-47965 (Adobe Acrobat Reader): Apply APSB26-63; enforce Protected View.
  • CVE-2026-10520 (Ivanti Sentry): KEV deadline passed; patch immediately if not done.
  • CVE-2026-5027 (Langflow): Actively exploited; isolate from internet.
  • CVE-2026-50751 (Check Point Security Gateway): Actively exploited; apply hotfix sk185033.
  • CVE-2026-11645 (Google Chrome V8): Actively exploited; update to 149.0.7827.103 or later.
  • CVE-2026-42271 (BerriAI LiteLLM): KEV deadline 2026-06-22; upgrade to v1.83.7-stable.

EUROPEAN ADVISORIES

WID-SEC-2026-1811 (rclone) — UPDATE: BSI updated its advisory for rclone on 2026-06-12. A remote unauthenticated attacker can exploit the vulnerability to execute arbitrary code with user privileges, disclose confidential information, or manipulate data depending on the rclone version in use. Organizations using rclone in automated backup or data-sync pipelines should apply the latest rclone release and review pipeline configurations for exposure to untrusted remote endpoints.

MISP CVE-2026-54361 / CVE-2026-54360 / CVE-2026-54358 / CVE-2026-54359: Covered in Critical Vulnerabilities. MISP is widely deployed across European CERT and ISAC infrastructure; update to 2.5.40 and enable the Sec-Fetch-Site header check immediately.

No new CERT-EU advisories were published in the last 24 hours.

Previously reported BSI advisories for MongoDB (WID-SEC-2026-1906), IBM i (WID-SEC-2026-1903), VMware Tanzu Spring Cloud Gateway (WID-SEC-2026-1901), Langflow (WID-SEC-2026-1898), Google Chrome (WID-SEC-2026-1893), and OpenClaw (WID-SEC-2026-1738) remain open; apply vendor patches per yesterday’s guidance.

ACTIVE THREATS AND CAMPAIGNS

Arch Linux AUR Supply Chain Attack — ONGOING: Over 400 AUR packages remain implicated. Compromised build scripts install a Rust-based credential stealer; root execution loads an eBPF rootkit. Developer workstations and CI/CD pipelines building AUR packages are at direct risk. Audit recently built AUR packages, inspect for unexpected Rust binaries, and check for eBPF program loads via bpftool or auditd. No new IOCs published since yesterday’s report.

Velvet Ant Linux PAM/OpenSSH Backdoor — ONGOING: China-nexus group maintained near-decade persistence via backdoored PAM and OpenSSH components. Audit PAM module integrity and OpenSSH binary hashes on sensitive Linux systems.

Google vs. Outsider PhaaS (Chinese Smishing Network) — ONGOING: Google filed legal action against operators of the Outsider PhaaS kit, which used Gemini AI to scale smishing campaigns. Alert employees to AI-enhanced credential-harvesting SMS lures.

phpBB Authentication Bypass (NEW): A 10-year-old authentication bypass vulnerability in phpBB forum software was patched this week, allowing login as any user including administrators. Organizations running phpBB should apply the latest update immediately and audit administrator account activity.

SECURITY NEWS AND CONTEXT

Agentjacking: Tenet Security disclosed a new attack class tricking AI coding agents into executing arbitrary code via crafted Sentry error reports. Organizations using AI-assisted coding tools should review agent permissions and sandbox configurations.

US Government restricts Anthropic AI models: The US government ordered Anthropic to suspend access to Claude Fable 5 and Mythos 5 for all foreign nationals, citing national security concerns. Anthropic is complying while disputing the basis. Organizations relying on these models for security tooling should assess continuity impact.

Maine data breach portal abuse: Maine disabled its public breach notification portal after fraudulent disclosures were published, highlighting risks of unauthenticated public reporting interfaces.

RECOMMENDED ACTIONS

  1. Patch Oracle PeopleSoft immediately; CISA KEV deadline is 2026-06-15. Audit logs for the May 27 to June 9 window.
  2. Update vm2 to version 3.11.4; audit all services executing untrusted code via vm2 and apply OS-level sandboxing as defense in depth.
  3. Isolate or restrict ChromaDB multi-tenant deployments until vendor patches are available; disable trust_remote_code.
  4. Update MISP to version 2.5.40; enable Security.check_sec_fetch_site_header immediately.
  5. Apply MariaDB patches for CVE-2026-44168, CVE-2026-48163, and CVE-2026-48165; restrict Galera cluster membership to trusted nodes.
  6. Isolate Aqara smart home devices from sensitive network segments; rotate developer API tokens pending vendor patches.
  7. Apply the latest rclone update per BSI WID-SEC-2026-1811 update; review automated pipeline exposure.
  8. Update phpBB to the latest release; audit administrator account activity for unauthorized access.
  9. Audit Arch Linux AUR package builds in development and CI/CD environments for Rust infostealer and eBPF rootkit indicators.
  10. Continue remediation of previously reported items: Oracle PeopleSoft CVE-2026-35273, SimpleHelp CVE-2026-48558, Ivanti Sentry CVE-2026-10520, Langflow CVE-2026-5027, Check Point CVE-2026-50751, Chrome CVE-2026-11645, LiteLLM CVE-2026-42271.