Skip to content
OpenAdvisories

Vendor

BitterSecurity

1 known vulnerabilities.

Products

Decepticon 1 decepticon-core 1 decepticon-sdk 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-61732 Public exploit

    Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

    Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK (Bring…

    BitterSecurity decepticon-core Decepticon decepticon-sdk PyPI