---
title: "Security digest: October 7, 2026"
url: https://erroneo.us/security/2026-10-07/
description: "October 7, 2026 vulnerability digest: 2 briefs (Argo CD: Repo-Server RCE and AppProject Bypass…); 12 critical advisories (npm, PyPI, Go). What to patch and…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-10-07
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: October 7, 2026

2 editorial briefs and 12 critical advisories.

## Take stock

- Patch this week: Argo CD: Repo-Server RCE and AppProject Bypass (Oct 2026) . Teams running Argo CD 2.x or 3.x, most urgently multi-tenant installs where developers, tenants or CI bots can push to tracked Git repos, hold Application get, or manage repositories.
- Check exposure: GhostAction . Maintainers and organizations whose repositories, including forks and mirrors, received an injected 'Security Audit' or 'Github Actions Security' workflow since August 31, 2026, and anyone whose GitHub token or password may sit in infostealer logs.
- npm: 8 critical advisories ( flowise , flowise-components , @payloadcms/plugin-form-builder , quasar , vm2 , @backstage/plugin-scaffolder-backend , payload ). Check with npm audit (or: npm ls <package>) .
- PyPI: 2 critical advisories ( langflow , langflow-base , lfx , PraisonAI ). Check with pip-audit (or: pip show <package>) .
- Go: 2 critical advisories ( github.com/sipcapture/homer-app ). Check with govulncheck ./... .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Patch this week** [Argo CD: Repo-Server RCE and AppProject Bypass (Oct 2026)](https://erroneo.us/security/briefs/argo-cd-october-2026-repo-server-rce-appproject-bypass/index.md): Upgrade Argo CD to a patched 3.3, 3.4 or 3.5 release this week, and today on shared instances where people you do not fully trust can push to tracked repos or merely view an Application.
- **Check exposure** [GhostAction: Fake Security Workflows Steal GitHub Secrets](https://erroneo.us/security/briefs/ghostaction-github-workflow-credential-theft/index.md): If any repository you own or contribute to gained a security-audit.yml or github_actions_security.yml workflow you did not write, treat its Actions secrets, every credential ever committed to it, and the pushing account as compromised.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2026-73487](https://erroneo.us/security/cve/CVE-2026-73487/index.md) Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-105697](https://erroneo.us/security/cve/CVE-2026-105697/index.md) Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration — PyPI langflow >= 1.1.2, < 1.10.3 → 1.10.3; PyPI langflow-base >= 0.1.2, < 0.10.3 → 0.10.3; PyPI lfx < 1.10.3 → 1.10.3
- [CVE-2026-62253](https://erroneo.us/security/cve/CVE-2026-62253/index.md) Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default) — Go github.com/sipcapture/homer-app < 0.0.0-20260625093330-5e90809657c9 → 0.0.0-20260625093330-5e90809657c9
- [CVE-2026-105857](https://erroneo.us/security/cve/CVE-2026-105857/index.md) Payload Form Builder has an RCE issue — npm @payloadcms/plugin-form-builder < 3.90.0 → 3.90.0; npm @payloadcms/plugin-form-builder >= 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34
- [CVE-2026-106102](https://erroneo.us/security/cve/CVE-2026-106102/index.md) Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() — npm quasar < 2.22.0 → 2.22.0
- [CVE-2026-93605](https://erroneo.us/security/cve/CVE-2026-93605/index.md) vm2 contains a sandbox escape vulnerability — npm vm2 <= 3.12.0 → 3.12.1
- [CVE-2026-62176](https://erroneo.us/security/cve/CVE-2026-62176/index.md) PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation — PyPI PraisonAI <= 4.6.77 → 4.6.78
- [CVE-2026-106501](https://erroneo.us/security/cve/CVE-2026-106501/index.md) Backstage: Sensitive information exposure in Scaffolder — npm @backstage/plugin-scaffolder-backend < 3.3.1 → 3.3.1; npm @backstage/plugin-scaffolder-backend >= 3.4.0, < 3.4.1 → 3.4.1; npm @backstage/plugin-scaffolder-backend >= 4.0.0, < 4.0.3 → 4.0.3
- [CVE-2026-105859](https://erroneo.us/security/cve/CVE-2026-105859/index.md) Payload: Unauthorized update to collection documents — npm payload < 3.90.0 → 3.90.0; npm payload >= 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34
- [CVE-2026-73483](https://erroneo.us/security/cve/CVE-2026-73483/index.md) Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium — npm flowise <= 3.1.2 → 3.1.3; npm flowise-components <= 3.1.2 → 3.1.3
- [CVE-2026-62252](https://erroneo.us/security/cve/CVE-2026-62252/index.md) Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login — Go github.com/sipcapture/homer-app < 0.0.0-20260625091610-b2e942031ff8 → 0.0.0-20260625091610-b2e942031ff8
- [CVE-2026-105863](https://erroneo.us/security/cve/CVE-2026-105863/index.md) Payload authentication token field handling issue — npm payload >= 3.0.0, < 3.90.0 → 3.90.0; npm payload >= 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34

---
Source page: https://erroneo.us/security/2026-10-07/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt