# What your agent missed in August 2026

In August 2026, CISA added 8 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 5 critical advisories for widely used npm and PyPI packages, 3 release lines reached end of life and 3 new release lines shipped.

The ones to know first:

- **Aug 4, 2026**: CVE-2026-34486 added to CISA’s exploited list (Apache Tomcat). Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34486)
- **Aug 27, 2026**: litellm: server-side template injection in the /prompts/test endpoint (critical). Fixed in 1.83.7. [GitHub Advisory Database](https://github.com/advisories/GHSA-6wvf-77m9-58rm)
- **Aug 31, 2026**: Debian 11 reached end of life. No more security fixes. Latest: Debian 13. [endoflife.date](https://endoflife.date/debian)

## Exploited in the wild (8)

- **Aug 27, 2026**: CVE-2026-66384 added to CISA’s exploited list (JFrog Artifactory). JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-66384)
- **Aug 25, 2026**: CVE-2026-60004 added to CISA’s exploited list (Gitea). Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60004)
- **Aug 19, 2026**: CVE-2026-64849 added to CISA’s exploited list (MLflow). MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response\_status and… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849)
- **Aug 17, 2026**: CVE-2025-62593 added to CISA’s exploited list (Ray). Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62593)
- **Aug 11, 2026**: CVE-2026-72898 added to CISA’s exploited list (Metabase). Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72898)
- **Aug 5, 2026**: CVE-2026-63077 added to CISA’s exploited list (TeamCity). JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63077)
- **Aug 4, 2026**: CVE-2026-34486 added to CISA’s exploited list (Apache Tomcat). Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34486)
- **Aug 4, 2026**: CVE-2026-9198 added to CISA’s exploited list (Langflow). Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9198)

## Critical advisories (5)

- **Aug 27, 2026**: litellm: server-side template injection in the /prompts/test endpoint (critical). Fixed in 1.83.7. [GitHub Advisory Database](https://github.com/advisories/GHSA-6wvf-77m9-58rm)
- **Aug 25, 2026**: chainlit: command injection (critical). Fixed in 2.12.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-w3fx-mc44-mf6j)
- **Aug 7, 2026**: crypto-js: Insufficient Entropy in Cryptographic secret Generation (critical). Fixed in 4.0.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-rg76-677x-56q9)
- **Aug 5, 2026**: @nuxt/devtools: unauthenticated Nuxt DevTools RPC allows arbitrary command execution on… (critical). Fixed in 3.3.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-279x-mwfv-vcqv)
- **Aug 3, 2026**: sequelize: SQL injection (Oracle DB) (critical). Fixed in 6.37.4. [GitHub Advisory Database](https://github.com/advisories/GHSA-v8fg-2rw7-q452)

## Reached end of life (3)

- **Aug 31, 2026**: Debian 11 reached end of life. No more security fixes. Latest: Debian 13. [endoflife.date](https://endoflife.date/debian)
- **Aug 19, 2026**: Go 1.25 reached end of life. No more security fixes. Latest: Go 1.27. [endoflife.date](https://endoflife.date/go)
- **Aug 9, 2026**: Ruby on Rails 7.2 reached end of life. No more security fixes. Latest: Ruby on Rails 8.1. [endoflife.date](https://endoflife.date/rails)

## New release lines (3)

- **Aug 26, 2026**: Kubernetes 1.37 released. Latest version: 1.37.1. [endoflife.date](https://endoflife.date/kubernetes)
- **Aug 19, 2026**: Go 1.27 released. Latest version: 1.27.2. [endoflife.date](https://endoflife.date/go)
- **Aug 5, 2026**: Django 6.1 released. Latest version: 6.1.2. [endoflife.date](https://endoflife.date/django)

## Which models can’t know this

Every model below has a knowledge cutoff before August 2026, so it can’t know about any of this unless a tool gives it live data.

- Claude Fable 5.1 (Anthropic): June 2026
- Claude Haiku 5.5 (Anthropic): June 2026
- Claude Opus 5.5 (Anthropic): June 2026
- Claude Sonnet 5.5 (Anthropic): June 2026
- Claude Opus 5 (Anthropic): May 2026
- Grok 4.7 (xAI): May 2026
- GPT-6 Luna (OpenAI): May 18, 2026
- GPT-6 Astra (OpenAI): April 30, 2026
- GPT-6.1 Sol (OpenAI): April 30, 2026
- GPT-6 Sol (OpenAI): April 20, 2026
- Gemini 3.8 Flash (Google): March 2026
- Gemini 4 Argon (Google): March 2026
- GPT-5.6 Sol (OpenAI): February 16, 2026
- Claude Fable 5 (Anthropic): January 2026
- Claude Opus 4.7 (Anthropic): January 2026
- Claude Opus 4.8 (Anthropic): January 2026
- Claude Sonnet 5 (Anthropic): January 2026
- Grok 4.6 (xAI): January 2026
- MAI-Code-1.1-Flash (Microsoft): December 2025
- GPT-5.5 (OpenAI): December 1, 2025
- Claude Sonnet 4.6 (Anthropic): August 2025
- GPT-5.3-Codex (OpenAI): August 31, 2025
- GPT-5.4 (OpenAI): August 31, 2025
- GPT-5.4 Mini (OpenAI): August 31, 2025
- Claude Opus 4.5 (Anthropic): May 2025
- Claude Opus 4.6 (Anthropic): May 2025
- Claude Haiku 4.5 (Anthropic): February 2025
- Claude Sonnet 4.5 (Anthropic): January 2025
- Gemini 2.5 Flash (Google): January 2025
- Gemini 2.5 Pro (Google): January 2025
- Gemini 3 Flash (Google): January 2025
- Gemini 3.1 Pro (Google): January 2025
- GPT-5 (OpenAI): September 30, 2024
- GPT-5-Codex (OpenAI): September 30, 2024
- GPT-5.1 (OpenAI): September 30, 2024
- Llama 4 Maverick (Meta): August 2024
- GPT-4.1 (OpenAI): June 1, 2024
- o3 (OpenAI): June 1, 2024
- GPT-5 Mini (OpenAI): May 31, 2024
- GPT-4o (OpenAI): October 1, 2023

---

Checked Oct 17, 2026 against [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), [GitHub Advisory Database](https://github.com/advisories) and [endoflife.date](https://endoflife.date). Full report: https://stackprism.ai/reports/2026-08