Seventeen CVEs discovered and responsibly disclosed by Pavan Nallamothu, with fixes and credits from Apple, CISA, the NSA, NASA, and open-source projects including yt-dlp, AutoGPT, and BlueprintUE. Each entry links to the authoritative record where one exists, and to the vendor or repository advisory that names the reporter. Two of the NSA skills-service CVEs are GitHub-CNA-assigned and their cve.org records have not propagated yet, so the advisory is the canonical source there.
Sandbox file-read via a permissions issue in Apple Type Services, fixed across macOS Tahoe, Sequoia, and Sonoma.
Processing web content may lead to a denial-of-service via a null pointer dereference in Apple CoreText. Fixed across iOS, iPadOS, macOS, watchOS, and visionOS on 14 September 2026.
Privilege escalation to root admin via the Inception token endpoint. An arbitrary userId yields a JWT with that user's full authorities, and root URLs skip the proxyingSystemId check. Fixed in 4.6.1.
Privilege escalation via unauthorized admin-group assignment.
Cross-project IDOR in the validateCopy endpoint.
Authorization bypass via a URI-normalization differential in the RBAC layer.
Directory traversal in archive extraction (guard/sink mismatch on directory entries).
Unauthenticated CSRF in the kiosk /script_call endpoint allows arbitrary management-command execution.
Server-side request forgery with full response-body readback via the unmodified FilePond fetch API.
Authentication bypass via the Arkime live-capture service trusting X-Forwarded-User from any network.
SSRF via a user-controlled SMTP server, bypassing the IP blocklist.
Dangerous file-type creation via a filename-sanitization bypass (executable-shortcut injection).
Authenticated password change does not verify the current password (account takeover).
Active sessions are not invalidated after a password change or reset.
Missing brute-force protection on login.
Password-reset tokens have no expiry window.