VYPR

SAM

by Google

CVEs (1)

  • CVE-2026-102503CriOct 19, 2026
    risk 0.53cvss —epss 0.00

    Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote…