# What your agent missed in February 2026 In February 2026, CISA added 3 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 16 critical advisories for widely used npm and PyPI packages, 2 release lines reached end of life and 1 new release line shipped. The ones to know first: - **Feb 5, 2026**: CVE-2025-11953 added to CISA’s exploited list (React Native CLI). React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-11953) - **Feb 27, 2026**: langflow: remote code execution in CSV agent (critical). [GitHub Advisory Database](https://github.com/advisories/GHSA-3645-fxcv-hqr4) - **Feb 28, 2026**: Kubernetes 1.32 reached end of life. No more security fixes. Latest: Kubernetes 1.37. [endoflife.date](https://endoflife.date/kubernetes) ## Exploited in the wild (3) - **Feb 18, 2026**: CVE-2021-22175 added to CISA’s exploited list (GitLab). GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22175) - **Feb 5, 2026**: CVE-2025-11953 added to CISA’s exploited list (React Native CLI). React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-11953) - **Feb 3, 2026**: CVE-2021-39935 added to CISA’s exploited list (GitLab). GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39935) ## Critical advisories (16) - **Feb 27, 2026**: langflow: remote code execution in CSV agent (critical). [GitHub Advisory Database](https://github.com/advisories/GHSA-3645-fxcv-hqr4) - **Feb 25, 2026**: n8n: expression sandbox escape Leads to RCE (critical). Fixed in 1.123.22 and 2.9.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-vpcf-gvg4-6qwr) - **Feb 25, 2026**: n8n: arbitrary command execution via file write and Git Operations (critical). Fixed in 1.123.8 and 2.2.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-x2mw-7j39-93xq) - **Feb 25, 2026**: n8n: potential remote code execution via Merge node (critical). Fixed in 1.123.22 and 2.9.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-wxx7-mcgf-j869) - **Feb 25, 2026**: n8n: sandbox escape in its JavaScript Task runner (critical). Fixed in 1.123.22 and 2.9.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-jjpj-p2wh-qf23) - **Feb 25, 2026**: n8n: unauthenticated expression evaluation via Form node (critical). Fixed in 1.123.22 and 2.9.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-75g8-rv7v-32f7) - **Feb 21, 2026**: mlflow: MLflow use of default password authentication bypass vulnerability (critical). [GitHub Advisory Database](https://github.com/advisories/GHSA-gq3w-7jj3-x7gr) - **Feb 20, 2026**: fast-xml-parser: entity encoding bypass via regex injection in DOCTYPE entity names (critical). Fixed in 5.3.5 and 4.5.4. [GitHub Advisory Database](https://github.com/advisories/GHSA-m7jm-9gc2-mpf2) - **Feb 18, 2026**: nltk: Zip Slip vulnerability (critical). Fixed in 3.9.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-7p94-766c-hgjp) - **Feb 4, 2026**: n8n: Python sandbox escape (critical). Fixed in 2.4.8. [GitHub Advisory Database](https://github.com/advisories/GHSA-8398-gmmx-564h) - **Feb 4, 2026**: n8n: arbitrary file write leading to RCE (critical). Fixed in 1.118.0 and 2.4.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-hv53-3329-vmrm) - **Feb 4, 2026**: n8n: OS command injection in Git node (critical). Fixed in 2.5.0 and 1.123.10. [GitHub Advisory Database](https://github.com/advisories/GHSA-9g95-qf3f-ggrw) - **Feb 4, 2026**: n8n: n8n's improper file access Controls Allow arbitrary file read (critical). Fixed in 2.5.0 and 1.123.18. [GitHub Advisory Database](https://github.com/advisories/GHSA-gfvg-qv54-r4pc) - **Feb 4, 2026**: n8n: expression escape vulnerability Leading to RCE (critical). Fixed in 1.123.17 and 2.5.2. [GitHub Advisory Database](https://github.com/advisories/GHSA-6cqr-8cfr-67f8) - **Feb 4, 2026**: n8n: command injection in Community package Installation (critical). Fixed in 1.120.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-7c4h-vh2m-743m) - **Feb 2, 2026**: vllm: RCE in Video Processing (critical). Fixed in 0.14.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-4r2x-xpjr-7cvv) ## Reached end of life (2) - **Feb 28, 2026**: Kubernetes 1.32 reached end of life. No more security fixes. Latest: Kubernetes 1.37. [endoflife.date](https://endoflife.date/kubernetes) - **Feb 10, 2026**: Go 1.24 reached end of life. No more security fixes. Latest: Go 1.27. [endoflife.date](https://endoflife.date/go) ## New release lines (1) - **Feb 10, 2026**: Go 1.26 released. Latest version: 1.26.9. [endoflife.date](https://endoflife.date/go) ## Which models can’t know this Every model below has a knowledge cutoff before February 2026, so it can’t know about any of this unless a tool gives it live data. - Claude Fable 5 (Anthropic): January 2026 - Claude Opus 4.7 (Anthropic): January 2026 - Claude Opus 4.8 (Anthropic): January 2026 - Claude Sonnet 5 (Anthropic): January 2026 - Grok 4.6 (xAI): January 2026 - MAI-Code-1.1-Flash (Microsoft): December 2025 - GPT-5.5 (OpenAI): December 1, 2025 - Claude Sonnet 4.6 (Anthropic): August 2025 - GPT-5.3-Codex (OpenAI): August 31, 2025 - GPT-5.4 (OpenAI): August 31, 2025 - GPT-5.4 Mini (OpenAI): August 31, 2025 - Claude Opus 4.5 (Anthropic): May 2025 - Claude Opus 4.6 (Anthropic): May 2025 - Claude Haiku 4.5 (Anthropic): February 2025 - Claude Sonnet 4.5 (Anthropic): January 2025 - Gemini 2.5 Flash (Google): January 2025 - Gemini 2.5 Pro (Google): January 2025 - Gemini 3 Flash (Google): January 2025 - Gemini 3.1 Pro (Google): January 2025 - GPT-5 (OpenAI): September 30, 2024 - GPT-5-Codex (OpenAI): September 30, 2024 - GPT-5.1 (OpenAI): September 30, 2024 - Llama 4 Maverick (Meta): August 2024 - GPT-4.1 (OpenAI): June 1, 2024 - o3 (OpenAI): June 1, 2024 - GPT-5 Mini (OpenAI): May 31, 2024 - GPT-4o (OpenAI): October 1, 2023 --- Checked Oct 17, 2026 against [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), [GitHub Advisory Database](https://github.com/advisories) and [endoflife.date](https://endoflife.date). Full report: https://stackprism.ai/reports/2026-02