Security Digest: October 16, 2026 - 26 Critical Vulnerabilities

Today’s alert is dominated by authentication bypasses, privilege escalation, and config-validation failures across developer platforms, Kubernetes tooling, and Nginx management stacks. The immediate priority is to patch exposed admin surfaces, revoke or rotate credentials that may have been stolen, and disable risky features until updates are applied.

· 29 min read

Executive Summary

Today’s alert is dominated by authentication bypasses, privilege escalation, and config-validation failures across developer platforms, Kubernetes tooling, and Nginx management stacks. The immediate priority is to patch exposed admin surfaces, revoke or rotate credentials that may have been stolen, and disable risky features until updates are applied.

Several of today’s issues are exploitable with only a normal user session or a single crafted request. If you run any of the affected products, treat this as a same-day remediation event.

Critical Vulnerabilities

  • CVE-2026-77459: Argo CD delete-hook project check bypass
    • Impact: Users who can push to an Application’s Git repo can use PreDelete/PostDelete hooks to create cluster-scoped resources or objects in namespaces the project would normally block.
    • Affected Systems: Argo CD v2.10.0 and later, including supported v3.x releases before the patched versions.
    • Immediate Action: Upgrade to v3.6.0-rc2, v3.5.4, v3.4.10, or v3.3.15.
    • Mitigation: Restrict Git write access, limit who can delete Applications, and tighten application-controller RBAC now.
  • CVE-2026-77524: KEDA token exfiltration via TriggerAuthentication
    • Impact: A namespace admin can trick the operator into sending its own ServiceAccount token to attacker-controlled infrastructure, leading to cluster-wide secret access and cluster-admin-level reach.
    • Affected Systems: KEDA v2.20.0 and similar default deployments.
    • Immediate Action: Remove tenant access to TriggerAuthentication and ScaledObject creation until patched; rotate KEDA operator credentials.
    • Mitigation: Upgrade as soon as a fixed release is available; block tenant-controlled Vault addresses and review operator RBAC.
  • CVE-2026-104252: Vitess vttablet reflected XSS
    • Impact: An attacker can run JavaScript in an operator’s browser and read debug endpoints, query logs, and environment data.
    • Affected Systems: Released Vitess builds with the vulnerable /twopcz handler.
    • Immediate Action: Restrict access to vttablet HTTP ports immediately; treat operator browsers as exposed until a fixed release is available.
    • Mitigation: Apply the upstream fix when released; place vttablet behind a strict allowlist or reverse proxy.
  • CVE-2026-102989: TanStack Start server-function XSS
    • Impact: A crafted link can return attacker-controlled HTML from the app’s own origin and run JavaScript in the victim’s browser.
    • Affected Systems: @tanstack/start-server-core, @tanstack/react-start, @tanstack/solid-start, and @tanstack/vue-start versions before the patched releases.
    • Immediate Action: Upgrade to the patched package versions now.
    • Mitigation: Add edge rules for server-function routes and tighten CSP until upgraded.
  • CVE-2026-85990: Leantime JSON-RPC authorization bypass
    • Impact: Any authenticated user, including readonly, can create admin-level accounts and call plugin-management methods without proper checks.
    • Affected Systems: Leantime deployments using the exposed JSON-RPC API.
    • Immediate Action: Disable or restrict JSON-RPC access and patch to the native permission-engine release.
    • Mitigation: Upgrade to v3.9.0 or later; audit for unauthorized user creation and plugin changes.
  • CVE-2026-84313: Nginx UI 2FA enrollment takeover
    • Impact: A stolen JWT can be used to bind an attacker-controlled OTP secret or passkey to the victim’s account, locking the user out.
    • Affected Systems: Nginx UI builds exposing /api/otp_enroll and passkey registration outside secure-session checks.
    • Immediate Action: Restrict JWT exposure, monitor for unexpected OTP/passkey enrollment, and patch immediately.
    • Mitigation: Move enrollment routes behind secure-session enforcement and require current-password confirmation.
  • CVE-2026-84316: Nginx UI directive validation bypass via semicolons
    • Impact: Authenticated users can smuggle blocked Nginx directives and, on common builds, reach code execution or root-level config effects.
    • Affected Systems: Nginx UI validation paths that rely on newline-only scanning.
    • Immediate Action: Disable config editing for untrusted users and remove access to NJS/perl-enabled deployments until patched.
    • Mitigation: Patch validation to parse statements the way Nginx does; block include and all restricted directives.
  • CVE-2026-84317: Nginx UI MCP config-add validation bypass
    • Impact: Authenticated MCP callers can write restricted config files that the HTTP API would reject, enabling Nginx worker compromise on module-enabled systems.
    • Affected Systems: Nginx UI installations with MCP enabled.
    • Immediate Action: Turn off MCP config tools if you do not need them; audit for suspicious config writes.
    • Mitigation: Apply validation to nginx_config_add before write/reload.
  • CVE-2026-84318: Nginx UI MCP config-add RCE path
    • Impact: An authenticated attacker can write blocked directives such as perl, js_import, or user root through MCP and trigger reloads automatically.
    • Affected Systems: Nginx UI deployments exposing MCP configuration tools.
    • Immediate Action: Disable MCP access now unless it is essential and trusted.
    • Mitigation: Backport the missing ValidateConfigFile call into the add path.
  • CVE-2026-84319: Nginx UI MCP secure-session bypass
    • Impact: OTP-enabled users can mutate configuration through MCP without the intended step-up authentication.
    • Affected Systems: Nginx UI with MCP enabled and OTP in use.
    • Immediate Action: Treat MCP as high risk and require extra access controls immediately.
    • Mitigation: Enforce secure-session checks on MCP mutation routes.
  • CVE-2026-84360: Nginx UI MCP route bypass for config mutations
    • Impact: An authenticated OTP user can bypass the HTTP secure-session boundary and write Nginx config through MCP.
    • Affected Systems: Nginx UI MCP deployments.
    • Immediate Action: Disable MCP config mutation features until patched.
    • Mitigation: Apply the same step-up enforcement used by the HTTP config API.
  • CVE-2026-103929: mise shell-args trust bypass
    • Impact: An untrusted local .mise.toml can control shell interpreter arguments and execute attacker-supplied commands.
    • Affected Systems: mise repositories that load untrusted project settings.
    • Immediate Action: Avoid entering untrusted repositories with mise active; inspect local settings files before use.
    • Mitigation: Mark all shell-args settings as global-only and update immediately.
  • CVE-2026-95837: containerd checkpoint restore privilege bypass
    • Impact: A container restored from an untrusted checkpoint can bypass destination security policy and regain elevated privileges.
    • Affected Systems: containerd CRI checkpoint-restore deployments before the fixed releases.
    • Immediate Action: Stop using restore-via-CreateContainer for untrusted artifacts; restart any restored workloads from clean images.
    • Mitigation: Upgrade to 2.2.7 or 2.3.4, or remove the feature entirely by moving to 2.4.0.
  • CVE-2026-82416: FrankenPHP worker-mode session leakage
    • Impact: One user’s session ID can be reused or exposed to another request under concurrency, causing cross-user session confusion.
    • Affected Systems: FrankenPHP builds where PHP’s session extension is loaded as a shared module.
    • Immediate Action: Use static session builds or stop worker mode on affected packages.
    • Mitigation: Deploy a build with the fixed session reset behavior.
  • CVE-2026-97394: kin-openapi OpenAPI 3.1 array-items nil panic
    • Impact: A single crafted request can crash request validation when a schema defines an array without items.
    • Affected Systems: Applications using github.com/getkin/kin-openapi with OAS 3.1 request/response validation.
    • Immediate Action: Upgrade the library and test all OpenAPI 3.1 endpoints that accept form bodies or array headers.
    • Mitigation: Apply the upstream nil-check fix and add regression tests.
  • CVE-2026-59951: MCP Streamable HTTP session memory exhaustion
    • Impact: An authenticated client can open unlimited sessions and drive server memory growth until restart.
    • Affected Systems: MCP Streamable HTTP servers in stateful mode before the fixed releases.
    • Immediate Action: Limit session creation and reduce exposure to trusted clients only.
    • Mitigation: Upgrade to mcp 1.30.0 or 2.2.0 or later.
  • CVE-2026-104827: React HTTP client header-buffer DoS
    • Impact: A malicious server can stream an endless response header section and exhaust client memory.
    • Affected Systems: Applications using react/http as an HTTP client.
    • Immediate Action: Treat untrusted redirect targets as hostile and patch client dependencies.
    • Mitigation: Upgrade to a version with response-header limits.
  • CVE-2026-97370: Junrar infinite loop on crafted archive
    • Impact: A malicious RAR file can pin CPU during extraction and block archive-processing workers.
    • Affected Systems: Applications using com.github.junrar:junrar.
    • Immediate Action: Quarantine untrusted archives and disable automated extraction jobs if possible.
    • Mitigation: Patch to a release that fixes VM jump accounting.
  • CVE-2026-100354: kin-openapi circular schema stack overflow
    • Impact: A circular combinator schema can trigger a fatal stack overflow and take down the whole process.
    • Affected Systems: github.com/getkin/kin-openapi request/response validation paths.
    • Immediate Action: Block untrusted OpenAPI documents and upgrade immediately.
    • Mitigation: Add cycle detection to runtime validation paths.
  • CVE-2026-100353: kin-openapi missed nil-items crash paths
    • Impact: Query, deepObject, and nested body array parsing can still panic on OpenAPI 3.1 schemas without items.
    • Affected Systems: github.com/getkin/kin-openapi deployments using array query/body validation.
    • Immediate Action: Upgrade and add tests for array schemas in query and nested object parameters.
    • Mitigation: Backport the missing nil guards to all decoder paths.
  • CVE-2026-100352: kin-openapi NaN/Inf validation crash
    • Impact: A YAML request body containing .nan or .inf can panic validation in OpenAPI 3.1 flows.
    • Affected Systems: github.com/getkin/kin-openapi with YAML request validation.
    • Immediate Action: Upgrade the transitive JSON-schema dependency immediately.
    • Mitigation: Move to the fixed jsonschema release and re-test YAML endpoints.
  • CVE-2026-103030: Dio HTTP/2 redirect credential leak
    • Impact: Cross-origin redirects can leak Authorization, Cookie, and proxy headers to an attacker-controlled server.
    • Affected Systems: Apps using dio_http2_adapter with redirect-following enabled.
    • Immediate Action: Disable redirects for sensitive requests and upgrade the adapter.
    • Mitigation: Strip sensitive headers on cross-origin redirects.
  • CVE-2026-100409: OpenNext Cloudflare cache interception auth bypass
    • Impact: Encoded paths can skip middleware and still hit cached protected content.
    • Affected Systems: @opennextjs/cloudflare apps with cache interception enabled.
    • Immediate Action: Disable enableCacheInterception until patched.
    • Mitigation: Upgrade to 1.20.2 or later and enforce auth in route handlers.
  • CVE-2026-100351: kin-openapi encoded-path route confusion
    • Impact: Validation can authorize one OpenAPI route while the downstream router dispatches another, bypassing auth checks.
    • Affected Systems: Apps using ValidationHandler.Middleware with encoded-path routing.
    • Immediate Action: Test for encoded-path route mismatches and stop relying on validation-only auth decisions.
    • Mitigation: Align router semantics or fail closed on encoded separators.
  • CVE-2026-84312: Casdoor login CSRF in Nginx UI
    • Impact: A victim can be silently logged in as the attacker, exposing subsequent actions and data to account confusion and theft.
    • Affected Systems: Nginx UI deployments using Casdoor SSO.
    • Immediate Action: Disable Casdoor SSO until patched and review recent logins.
    • Mitigation: Use per-session random state validation like the OIDC flow.

Previously Alerted

The following CVEs were already covered in prior digests or alerts; do not re-summarize them, but keep them on your watchlist:

What to Do Now

  1. Patch exposed internet-facing services first. Prioritize identity, Kubernetes, Nginx management, and API validation layers before internal tooling.
  2. Disable risky features you do not need. That includes MCP config mutation, cache interception, delete hooks, and any config-editing surface exposed to non-admin users.
  3. Rotate credentials that may have been exposed. Assume operator tokens, API keys, and session material may already be compromised where token theft or XSS is involved.
  4. Audit for abuse now. Look for unexpected Application deletions, new admin users, config writes, OTP/passkey enrollments, and suspicious reloads or restarts.
  5. Verify fixes with targeted checks. Confirm that untrusted users cannot write restricted config, bypass secure-session gates, or trigger validation crashes with array schemas or malformed YAML.

Verification steps:

  • Confirm package versions against the patched releases listed above.
  • Search logs for reload, restart, new credentials, and unexpected auth callbacks around today’s alert window.
  • Test one protected route per product from a low-privilege account and confirm it is blocked.

Monitoring recommendations: alert on new cluster-scoped Kubernetes objects, new Nginx config writes, OTP/passkey enrollment events, repeated validation panics, and any browser-side XSS indicators in operator sessions.

Related Resources

  • Internal follow-up analysis on today’s Nginx UI and kin-openapi issues: coming soon
  • Official vendor advisories and upstream security notes for Argo CD, KEDA, Vitess, Leantime, containerd, and Nginx UI

Keep reading