[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-103956":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-02T17:25:24.142Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":255,"aliases":256,"duplicate_of":9,"upstream":257,"downstream":258,"duplicates":259,"related":260,"reserved_at":9,"published_at":261,"modified_at":262,"state":263,"summary":264,"references_raw":271,"kevs":289,"epss":9,"epss_history":290,"metrics":291,"affected":301},"CVE-2026-103956","Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role policies attached to managed agent roles, via any request to the application API in a deployment where no identity provider is configured.\n\n\n\nTo remediate this issue, users should upgrade to version 1.6.1 or later.",null,[11,40],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","weakness","Draft","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-12","Choosing Message Identifier",[],{"id":25,"name":26,"techniques":27},"CAPEC-166","Force the System to Reset Values",[],{"id":29,"name":30,"techniques":31},"CAPEC-216","Communication Channel Manipulation",[],{"id":33,"name":34,"techniques":35},"CAPEC-36","Using Unpublished Interfaces or Functionality",[],{"id":37,"name":38,"techniques":39},"CAPEC-62","Cross Site Request Forgery",[],{"_key":41,"id":41,"name":42,"description":43,"type":15,"status":44,"abstraction":17,"likelihood_of_exploit":9,"capec":45},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.","Incomplete",[46],{"id":47,"name":48,"techniques":49},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[50,87,127],{"id":51,"name":52,"tactics":53,"countermeasures":60},"T1211","Exploitation for Stealth",[54,57],{"id":55,"name":56},"TA0030","Defense Evasion",{"id":58,"name":59},"TA0005","Stealth",[61,66,71,75,79,83],{"id":62,"name":63,"tactic":64},"D3-PSEP","Process Segment Execution Prevention",{"name":65},"Harden",{"id":67,"name":68,"tactic":69},"D3-MBT","Memory Boundary Tracking",{"name":70},"Detect",{"id":72,"name":73,"tactic":74},"D3-PCSV","Process Code Segment Verification",{"name":70},{"id":76,"name":77,"tactic":78},"D3-SFCV","Stack Frame Canary Validation",{"name":65},{"id":80,"name":81,"tactic":82},"D3-SSC","Shadow Stack Comparisons",{"name":70},{"id":84,"name":85,"tactic":86},"D3-SAOR","Segment Address Offset Randomization",{"name":65},{"id":88,"name":89,"tactics":90,"countermeasures":96},"T1542.002","Component Firmware",[91,92,93],{"id":55,"name":56},{"id":58,"name":59},{"id":94,"name":95},"TA0110","Persistence",[97,101,105,109,113,118,123],{"id":98,"name":99,"tactic":100},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":70},{"id":102,"name":103,"tactic":104},"D3-FV","Firmware Verification",{"name":70},{"id":106,"name":107,"tactic":108},"D3-FBA","Firmware Behavior Analysis",{"name":70},{"id":110,"name":111,"tactic":112},"D3-SU","Software Update",{"name":65},{"id":114,"name":115,"tactic":116},"D3-SWI","Software Inventory",{"name":117},"Model",{"id":119,"name":120,"tactic":121},"D3-RS","Restore Software",{"name":122},"Restore",{"id":124,"name":125,"tactic":126},"D3-AVE","Asset Vulnerability Enumeration",{"name":117},{"id":128,"name":129,"tactics":130,"countermeasures":139},"T1556","Modify Authentication Process",[131,132,135,136],{"id":55,"name":56},{"id":133,"name":134},"TA0112","Defense Impairment",{"id":94,"name":95},{"id":137,"name":138},"TA0031","Credential Access",[140,145,149,154,158,162,166,170,174,178,182,186,190,194,199,203,207,211,215,219,223,227,231,235,239,243,247,251],{"id":141,"name":142,"tactic":143},"D3-LFP","Local File Permissions",{"name":144},"Isolate",{"id":146,"name":147,"tactic":148},"D3-HBPI","Hardware-based Process Isolation",{"name":144},{"id":150,"name":151,"tactic":152},"D3-FEV","File Eviction",{"name":153},"Evict",{"id":155,"name":156,"tactic":157},"D3-HS","Host Shutdown",{"name":153},{"id":159,"name":160,"tactic":161},"D3-PSMD","Process Self-Modification Detection",{"name":70},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":144},{"id":167,"name":168,"tactic":169},"D3-ABPI","Application-based Process Isolation",{"name":144},{"id":171,"name":172,"tactic":173},"D3-SFA","System File Analysis",{"name":70},{"id":175,"name":176,"tactic":177},"D3-PT","Process Termination",{"name":153},{"id":179,"name":180,"tactic":181},"D3-SCF","System Call Filtering",{"name":144},{"id":183,"name":184,"tactic":185},"D3-AM","Access Modeling",{"name":117},{"id":187,"name":188,"tactic":189},"D3-RC","Restore Configuration",{"name":122},{"id":191,"name":192,"tactic":193},"D3-FE","File Encryption",{"name":65},{"id":195,"name":196,"tactic":197},"D3-DF","Decoy File",{"name":198},"Deceive",{"id":200,"name":201,"tactic":202},"D3-FIM","File Integrity Monitoring",{"name":70},{"id":204,"name":205,"tactic":206},"D3-CF","Content Filtering",{"name":144},{"id":208,"name":209,"tactic":210},"D3-FA","File Analysis",{"name":70},{"id":212,"name":213,"tactic":214},"D3-WSAM","Web Session Access Mediation",{"name":144},{"id":216,"name":217,"tactic":218},"D3-CI","Configuration Inventory",{"name":117},{"id":220,"name":221,"tactic":222},"D3-RF","Restore File",{"name":122},{"id":224,"name":225,"tactic":226},"D3-PSA","Process Spawn Analysis",{"name":70},{"id":228,"name":229,"tactic":230},"D3-PLA","Process Lineage Analysis",{"name":70},{"id":232,"name":233,"tactic":234},"D3-RFAM","Remote File Access Mediation",{"name":144},{"id":236,"name":237,"tactic":238},"D3-CM","Content Modification",{"name":144},{"id":240,"name":241,"tactic":242},"D3-NTPM","Network Traffic Policy Mapping",{"name":117},{"id":244,"name":245,"tactic":246},"D3-KBPI","Kernel-based Process Isolation",{"name":144},{"id":248,"name":249,"tactic":250},"D3-PS","Process Suspension",{"name":153},{"id":252,"name":253,"tactic":254},"D3-HR","Host Reboot",{"name":153},[],[],[],[],[],[],"2026-10-02T19:06:06.883Z","2026-10-02T21:09:30.961Z","Received",{"cisa_kev":265,"cisa_ransomware":265,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":266,"severity_score":267,"severity_version":268,"severity_source":269,"severity_vector":270,"severity_status":263},false,"critical",10,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",[272,279,284],{"url":273,"sources":274,"tags":276},"https://github.com/awslabs/loom/releases/tag/v1.6.1",[269,275],"nvd",[277,278],"Release Notes","Patch",{"url":280,"sources":281,"tags":282},"https://aws.amazon.com/security/security-bulletins/2026-124-aws/",[269,275],[283],"Vendor Advisory",{"url":285,"sources":286,"tags":287},"https://github.com/awslabs/loom/security/advisories/GHSA-vgmj-998f-r8mp",[269,275],[288],"Third Party Advisory",[],[],[292,297],{"source":269,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":293,"cvss_v4_0":296},{"baseScore":267,"baseSeverity":294,"vectorString":295,"impactScore":267,"exploitabilityScore":267},"CRITICAL","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",{"baseScore":267,"baseSeverity":294,"vectorString":270,"impactScore":9,"exploitabilityScore":9},{"source":275,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":298,"cvss_v4_0":299},{"baseScore":267,"baseSeverity":294,"vectorString":295,"impactScore":267,"exploitabilityScore":267},{"baseScore":267,"baseSeverity":294,"vectorString":300,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[302],{"ecosystem":9,"name":303,"vendor":304,"product":303,"cpe_part":305,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":306},"loom","aws","a",[307],{"version":308,"is_range":309,"range_type":269,"version_start":9,"version_start_type":9,"version_end":310,"version_end_type":311,"fixed_in":9},"\u003C 1.6.1",true,"1.6.1","excluding"]