---
title: "Security digest: February 2, 2026"
url: https://erroneo.us/security/2026-02-02/
description: "February 2, 2026 vulnerability digest: 1 brief (Notepad++ Updater Hijack: State Actor Served Bad…); 8 critical advisories (PyPI, Maven, npm, Composer…).…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-02-02
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: February 2, 2026

1 editorial brief and 8 critical advisories.

## Take stock

- Check exposure: Notepad++ Updater Hijack: State Actor Served Bad Updates . Organizations that ran Notepad++ before 8.8.9 with the built-in auto-updater during June-December 2025, especially government, financial, telecom and IT service providers in Southeast Asia and Central America.
- PyPI: 4 critical advisories ( langroid , h2o , bambuddy , vllm ). Check with pip-audit (or: pip show <package>) .
- npm: 3 critical advisories ( locutus , @signalk/set-system-time , @nyariv/sandboxjs ). Check with npm audit (or: npm ls <package>) .
- Maven: 1 critical advisory ( ai.h2o:h2o-core ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- Composer (PHP): 1 critical advisory ( ci4-cms-erp/ci4ms ). Check with composer audit .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Notepad++ Updater Hijack: State Actor Served Bad Updates](https://erroneo.us/security/briefs/notepad-plus-plus-updater-hijack-cve-2025-15556/index.md): Targeting was narrow (about a dozen machines in Kaspersky's telemetry), but any fleet that auto-updated Notepad++ between June and December 2025 should update to v8.9.1+ and check the published IoCs.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2026-25481](https://erroneo.us/security/cve/CVE-2026-25481/index.md) Langroid has WAF Bypass Leading to RCE in TableChatAgent — PyPI langroid <= 0.59.31 → 0.59.32
- [CVE-2024-5986](https://erroneo.us/security/cve/CVE-2024-5986/index.md) H2O has an External Control of File Name or Path vulnerability — Maven ai.h2o:h2o-core <= 3.46.0.1 → no fix; PyPI h2o <= 3.46.0.1 → no fix
- [CVE-2026-25521](https://erroneo.us/security/cve/CVE-2026-25521/index.md) locutus is vulnerable to Prototype Pollution — npm locutus >= 2.0.12, < 2.0.39 → 2.0.39
- [CVE-2026-23515](https://erroneo.us/security/cve/CVE-2026-23515/index.md) Signal K set-system-time plugin vulnerable to RCE - Command Injection — npm @signalk/set-system-time < 1.5.0 → 1.5.0
- [CVE-2026-25510](https://erroneo.us/security/cve/CVE-2026-25510/index.md) CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor — Composer (PHP) ci4-cms-erp/ci4ms < 0.28.5.0 → 0.28.5.0
- [CVE-2026-25505](https://erroneo.us/security/cve/CVE-2026-25505/index.md) Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication — PyPI bambuddy < 0.1.7 → 0.1.7
- [CVE-2026-25142](https://erroneo.us/security/cve/CVE-2026-25142/index.md) SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE — npm @nyariv/sandboxjs <= 0.8.26 → 0.8.27
- [CVE-2026-22778](https://erroneo.us/security/cve/CVE-2026-22778/index.md) vLLM has RCE In Video Processing — PyPI vllm >= 0.8.3, < 0.14.1 → 0.14.1

---
Source page: https://erroneo.us/security/2026-02-02/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt