# What your agent missed in June 2026

In June 2026, CISA added 1 actively exploited vulnerability in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 10 critical advisories for widely used npm and PyPI packages, 3 release lines reached end of life and 1 new release line shipped.

The ones to know first:

- **Jun 8, 2026**: CVE-2026-42271 added to CISA’s exploited list (LiteLLM). BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42271)
- **Jun 19, 2026**: langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit (critical). Fixed in 1.9.2. [GitHub Advisory Database](https://github.com/advisories/GHSA-ccv6-r384-xp75)
- **Jun 30, 2026**: Amazon Linux 2 reached end of life. No more security fixes. Latest: Amazon Linux 2023. [endoflife.date](https://endoflife.date/amazon-linux)

## Exploited in the wild (1)

- **Jun 8, 2026**: CVE-2026-42271 added to CISA’s exploited list (LiteLLM). BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42271)

## Critical advisories (10)

- **Jun 22, 2026**: chainlit: session hijacking vulnerability (critical). Fixed in 2.10.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-c39v-8hrw-h448)
- **Jun 19, 2026**: langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit (critical). Fixed in 1.9.2. [GitHub Advisory Database](https://github.com/advisories/GHSA-ccv6-r384-xp75)
- **Jun 18, 2026**: jupyter-server: stored XSS in NbconvertFileHandler / NbconvertPostHandler (critical). Fixed in 2.20.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-fcw5-x6j4-ccmp)
- **Jun 17, 2026**: langflow: unauthenticated file upload (critical). Fixed in 1.9.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-x223-p2gf-v735)
- **Jun 16, 2026**: litellm: authentication bypass via host header injection (critical). Fixed in 1.84.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-4xpc-pv4p-pm3w)
- **Jun 16, 2026**: vllm: OpenAI auth bypass (critical). Fixed in 0.22.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-94f4-hr76-p5j6)
- **Jun 16, 2026**: langflow: unauthenticated RCE in Shareable Playgrounds (critical). Fixed in 1.9.2. [GitHub Advisory Database](https://github.com/advisories/GHSA-v5ff-9q35-q26f)
- **Jun 15, 2026**: electron: Buffer performs incorrect byte length calculations resulting in heap… (critical). Fixed in 42.3.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-q6m5-f73j-m9mc)
- **Jun 3, 2026**: mlflow: environment variable injection in AI gateway secrets enables… (critical). Fixed in 3.11.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-g35p-px32-whv6)
- **Jun 1, 2026**: vitest: arbitrary file can be read and executed (critical). Fixed in 4.1.0 and 3.2.6. [GitHub Advisory Database](https://github.com/advisories/GHSA-5xrq-8626-4rwp)

## Reached end of life (3)

- **Jun 30, 2026**: Amazon Linux 2 reached end of life. No more security fixes. Latest: Amazon Linux 2023. [endoflife.date](https://endoflife.date/amazon-linux)
- **Jun 30, 2026**: Spring Boot 3.5 reached end of life. No more security fixes. Latest: Spring Boot 4.1. [endoflife.date](https://endoflife.date/spring-boot)
- **Jun 28, 2026**: Kubernetes 1.33 reached end of life. No more security fixes. Latest: Kubernetes 1.37. [endoflife.date](https://endoflife.date/kubernetes)

## New release lines (1)

- **Jun 3, 2026**: Angular 22 released. Latest version: 22.2.3. [endoflife.date](https://endoflife.date/angular)

## Which models can’t know this

Every model below has a knowledge cutoff before June 2026, so it can’t know about any of this unless a tool gives it live data.

- Claude Opus 5 (Anthropic): May 2026
- Grok 4.7 (xAI): May 2026
- GPT-6 Luna (OpenAI): May 18, 2026
- GPT-6 Astra (OpenAI): April 30, 2026
- GPT-6.1 Sol (OpenAI): April 30, 2026
- GPT-6 Sol (OpenAI): April 20, 2026
- Gemini 3.8 Flash (Google): March 2026
- Gemini 4 Argon (Google): March 2026
- GPT-5.6 Sol (OpenAI): February 16, 2026
- Claude Fable 5 (Anthropic): January 2026
- Claude Opus 4.7 (Anthropic): January 2026
- Claude Opus 4.8 (Anthropic): January 2026
- Claude Sonnet 5 (Anthropic): January 2026
- Grok 4.6 (xAI): January 2026
- MAI-Code-1.1-Flash (Microsoft): December 2025
- GPT-5.5 (OpenAI): December 1, 2025
- Claude Sonnet 4.6 (Anthropic): August 2025
- GPT-5.3-Codex (OpenAI): August 31, 2025
- GPT-5.4 (OpenAI): August 31, 2025
- GPT-5.4 Mini (OpenAI): August 31, 2025
- Claude Opus 4.5 (Anthropic): May 2025
- Claude Opus 4.6 (Anthropic): May 2025
- Claude Haiku 4.5 (Anthropic): February 2025
- Claude Sonnet 4.5 (Anthropic): January 2025
- Gemini 2.5 Flash (Google): January 2025
- Gemini 2.5 Pro (Google): January 2025
- Gemini 3 Flash (Google): January 2025
- Gemini 3.1 Pro (Google): January 2025
- GPT-5 (OpenAI): September 30, 2024
- GPT-5-Codex (OpenAI): September 30, 2024
- GPT-5.1 (OpenAI): September 30, 2024
- Llama 4 Maverick (Meta): August 2024
- GPT-4.1 (OpenAI): June 1, 2024
- o3 (OpenAI): June 1, 2024
- GPT-5 Mini (OpenAI): May 31, 2024
- GPT-4o (OpenAI): October 1, 2023

---

Checked Oct 17, 2026 against [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), [GitHub Advisory Database](https://github.com/advisories) and [endoflife.date](https://endoflife.date). Full report: https://stackprism.ai/reports/2026-06