ZeroPath Labs

Security Research Team @zeropathai

[ZeroPath Labs @ZeroPathLabs]

CVE-2026-30950 Hits AutoGPT Chat

A chat session hijacking flaw in AutoGPT could let attackers intercept or take over user sessions. Patching is strongly recommended.

For more details, read ZeroPath's blog on this vuln.

#AppSec #InfoSec #AI

https://t.co/qWNVabGegq

[ZeroPath Labs @ZeroPathLabs]

AI Coding Assistants ≠ SAST

Relying on GitHub Copilot or ChatGPT is not the same as having a proper SAST program in place. Automate SAST for true code security.

For more details, read ZeroPath’s blog on this vuln.

#AppSec #DevSecOps

https://t.co/vcXkTs3r70

[ZeroPath Labs @ZeroPathLabs]

How to Handle Bug Bounty Reports with ZERO

Triage smarter, not harder. ZERO helps streamline bug bounty intake, automates sorting, and reduces duplicated efforts for your AppSec team.

For more details, read ZeroPath's blog on this vuln.

#BugBounty #AppSec #InfoSec

https://t.co/mRbNZit1Rk

[ZeroPath Labs @ZeroPathLabs]

Zero: AI Assistant for AppSec
Curious about how AI is reshaping app security? Zero helps security teams automate vulnerability triage and speed up remediation across toolchains.
For more details, read ZeroPath's blog on this vuln.
#AppSec #AI #CyberSecurity

https://t.co/dDfH6EiA1l

[ZeroPath Labs @ZeroPathLabs]

ZeroPath Outperforms Mythos in AppSec Testing

We put ZeroPath and Mythos head-to-head, and ZeroPath found more real vulnerabilities in less time. Curious about the details?

For more, read ZeroPath's blog on this vuln.

#AppSec #InfoSec

https://t.co/y4kcvhnoUP

[ZeroPath Labs @ZeroPathLabs]

CVE-2026-42167 impacts ProFTPD

This vuln enables auth bypass, privilege escalation, and code execution. Prioritize patching if you're running ProFTPD.

For more details, read ZeroPath's blog on this vuln.
#AppSec #InfoSec #ProFTPD

https://t.co/45HTcv7nGK

[ZeroPath Labs @ZeroPathLabs]

Critical RCE in Spinnaker: Patch Now

Two critical Spinnaker vulnerabilities (CVSS 10.0) allow remote code execution and full production takeover. Patch ASAP.
For more details, read ZeroPath's blog on this vuln.
#AppSec #CloudSecurity #ZeroTrust

https://t.co/dZl3y7kmDV

[ZeroPath Labs @ZeroPathLabs]

RAGFlow Post-Auth RCE Vulnerability

A serious post-auth RCE bug in RAGFlow lets attackers execute code after login. Patch ASAP to protect your environment.

For more details, read ZeroPath's blog on this vuln.

#AppSec #InfoSec #RCE

https://t.co/ANdM0A5EmJ

[ZeroPath Labs @ZeroPathLabs]

Opus 4.6 Vulnerability Detection: Pros and Cons

Opus 4.6 shows promise for catching vulns but beware the high false positive rate. Teams will need solid tuning for real-world use.

For more details, read ZeroPath's blog on this vuln.

#AppSec #VulnDetection #InfoSec

https://t.co/3plsgtrG3v

[ZeroPath Labs @ZeroPathLabs]

36 Sudo Bug Fixes Reduce CrackArmor Impact

ZeroPath uncovered that 36 recent Sudo patches directly limit CrackArmor exploitation routes. For more details, read ZeroPath's blog on this vuln.

#AppSec #Linux #InfoSec

https://t.co/ELrMwRS8tI

[ZeroPath Labs @ZeroPathLabs]

Best SAST Tools for 2026: What to Know

Choosing the right SAST tool is tough. We break down the top 7 for AppSec teams and CISOs, comparing features and use cases.
For more details, read ZeroPath's blog on this vuln.

#AppSec #DevSecOps #SAST

https://t.co/qW6YfIkgHc

[ZeroPath Labs @ZeroPathLabs]

Scaling AppSec at Aptos Labs: AI SAST for Rust

Aptos Labs is securing over 1M lines of Rust code with AI-powered SAST, enabling rapid detection of bugs and vulnerabilities at scale.

For more details, read ZeroPath's blog on this vuln.

#AppSec #Rust #AI

https://t.co/G3CWqYv9DI

[ZeroPath Labs @ZeroPathLabs]

Why Commenda Chose ZeroPath for Security

Commenda picked ZeroPath to protect their global tax platform, citing our deep expertise in risk assessment and proactive threat detection.

For more details, read ZeroPath's blog on this vuln.

#AppSec #CyberSecurity #InfoSec

https://t.co/BcEaacrjt5

[ZeroPath Labs @ZeroPathLabs]

ZeroPath Exploit Development CTFs

Looking to sharpen your exploit dev skills? ZeroPath runs hands-on CTFs focused on real-world vulnerabilities and practical techniques.

For more details, read ZeroPath's blog on this vuln.
#AppSec #ExploitDev #InfoSec

https://t.co/k2S8mGs64g

[ZeroPath Labs @ZeroPathLabs]

Openclaw (Clawdbot) Vulnerability Alert

Malicious websites can exploit Openclaw to steal user credentials through crafted payloads. Tighten browser security and check configs.

For more details, read ZeroPath's blog on this vuln.
#AppSec #CyberSecurity #InfoSec

https://t.co/OLKmZhewj5

[ZeroPath Labs @ZeroPathLabs]

7 FFmpeg Vulnerabilities Uncovered by AI

Our latest research uses AI to autonomously discover 7 new vulnerabilities in FFmpeg.
For more details, read ZeroPath's blog on this vuln.

#AppSec #CyberSecurity #AI

https://t.co/4KZcfioJQh

[ZeroPath Labs @ZeroPathLabs]

AI Finds 8 New FFmpeg Vulnerabilities

ZeroPath researchers used AI to autonomously discover 8 vulnerabilities in FFmpeg. Automation is accelerating vulnerability discovery in key open source projects.

For more details, read ZeroPath's blog on this vuln.

#AppSec #AI #OpenSourceSecurity

https://t.co/9aPBevJmYH

[ZeroPath Labs @ZeroPathLabs]

SureMail WordPress Plugin: Unrestricted File Upload Vulnerability

CVE-2025-13516 in SureMail allows attackers to upload malicious files without restriction. Sites running this plugin should update now.

For more details, read ZeroPath's blog on this vuln.
#WordPress #AppSec #InfoSec

https://t.co/Q3QjHb8dUT

[ZeroPath Labs @ZeroPathLabs]

vLLM RCE via Model Config Auto-Mapping: CVE-2025-66448

Attackers can trigger remote code execution in vLLM through unsafe model config mapping in unpatched versions. Patch ASAP.

For more details, read ZeroPath's blog on this vuln.

#AppSec #MachineLearning #InfoSec

https://t.co/10S7uSQwRi

[ZeroPath Labs @ZeroPathLabs]

IBM Informix Dynamic Server: Local Auth Bypass Issue

CVE-2024-45675 allows local attackers to bypass authentication on Windows systems.
Patch ASAP if you rely on Informix for critical data.
For more details, read ZeroPath's blog on this vuln.
#AppSec #InfoSec #DatabaseSecurity

https://t.co/wLcq0imEd5