Skip to content
OpenAdvisories

Vendor

Q00

2 known vulnerabilities.

Products

ouroboros 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-66065

    Ouroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211)

    Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incomplete denylist. Several execution-routing keys of the same RCE class were omitted…

    Q00 ouroboros ouroboros-ai PyPI
  • High 8.4
    CVE-2026-47211

    Ouroboros: Remote Code Execution via Untrusted Project-Directory .env

    Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory,…

    Q00 ouroboros ouroboros-ai PyPI