The read-only mode in mcp-server-kubernetes (20,000+ weekly npm downloads) ...doesn't actually restrict anything.
Neither do the other two access control modes.
CVE-2026-46519, CVSS 8.8 🧵
Francisco Rosales (@0xmagic0) of @Manifold_ai_sec found and reported the vulnerability.
Fixed in v3.6.0.
The filtering logic already existed. It just wasn't being called in both places. Update now.
This was an unauthenticated BAC vulnerability exposing among many things internal data. It was rated 9+ CVSS.
Sometimes the most impactful findings aren't the flashiest, just knowing where to look and what to test for.
#bugbounty#cybersecurity
This was a massive PII disclosure vulnerability. Records dating years back. A missing access control check sitting in front of the PII of every single customer on the site. This was a huge enterprise.
#bugbounty#cybersecurity#appsec#infosec
Another platform, another critical.
A while ago I did the Android security course by @hextreeio . Great course. I picked a program with a mobile app and started digging.
After some testing, I found a Critical. vulnerability
#bugbounty#cybersecurity#mobilesecurity
Today I'm open-sourcing agent2shell, a single Go binary that bridges reverse shells and AI agents. It catches reverse shells over TCP and exposes them as structured APIs via Unix sockets. Your AI agent just runs CLI commands:
▸ agent2shell run whoami
https://t.co/RyypQE6p8O
This was a couple of months back. I wanted to test a target running an AI system and find a vulnerability in it.
This was a data exfiltration (PII) leveraging prompt injection.
#bugbounty
@ctbbpodcast I built a tool for this. Instead of tmux send-keys + capture-pane, the AI agent runs agent2shell run "command" and gets the output back https://t.co/RyypQE6p8O