Access Control | jankesec

Root Cause AnalysisNov 10, 202617 min read

CVE-2026-125330: Cross-Workspace Session Access with a HarnessRouter Workspace Key

Root-cause analysis of CVE-2026-125330: HarnessRouter narrowed the session list to an API key's workspace, but the routes that take a session or response id checked only the organization. A workspace key that knew another workspace's session id could read, overwrite, publish and delete that session. Fixed in 0.31.7.

#vulnerability-research#access-control#ai-security#web-security

AI SecurityNov 9, 202614 min read

Breaking AI Agent Boundaries: From Prompt Injection to Remote Code Execution via Model Context Protocol (MCP)

How untrusted context in modern AI pipelines forces autonomous agents to execute arbitrary operating system commands through Model Context Protocol (MCP) server tools: indirect injection, ambient authority, and deterministic execution brokers.

#ai-security#exploit-development#attack-paths#methodology#access-control

ArchitectureNov 3, 202613 min read

Active Directory as a Directed Graph: How Security Descriptors and Object ACLs Actually Work

Active Directory stores every user, group, computer, and GPO as an LDAP object with a binary nTSecurityDescriptor. Walking the eight-hop escalation chain in GOAD's sevenkingdoms.local domain shows how ACE masks, Extended Rights GUIDs, and ownership changes turn helpdesk permissions into Domain Controller compromise.

#active-directory#access-control#identity-security#methodology#attack-paths

Patch AnalysisOct 20, 202610 min read

CVE-2026-112950: Windows Backslash Traversal in @vitest/mocker

Root-cause analysis of CVE-2026-112950: on Windows, a redirect mock path containing a backslash passes the Vite allowlist check added by the first fix and then reads a file outside the project root.

#vulnerability-research#web-security#access-control#exploit-development

Patch AnalysisOct 8, 202610 min read

CVE-2026-107716: Symlink Traversal in banks Prompt Registry

Root-cause analysis of CVE-2026-107716: DirectoryPromptRegistry in banks followed symbolic links out of its prompt directory, so a link could make it read an arbitrary file through _scan() and get(), or overwrite one through set() and index.json.

#vulnerability-research#access-control#ai-security#exploit-development

Patch AnalysisSep 16, 202614 min read

CVE-2026-87772: Root Escalation Through the Pardus About Mount Helper

Root-cause analysis of CVE-2026-87772: Pardus About's passwordless Polkit action started a root helper that mounted attached disks with defaults,ro, so a setuid binary on a disk gave a local user root. Fixed in 1.2.5.

#linux-security#privilege-escalation#access-control#vulnerability-research#exploit-development