Unverified50% confidenceFactExact time
v2.1.292 fixes a security issue where the PreToolUse hook approval and auto mode could bypass permission prompts when reading files from network (UNC) paths.
1
Sources
50%
Confidence
Long-term
Relevance
10/6/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedHistorical RouterOS vulnerabilities include CVE-2018-14847, a Winbox protocol vulnerability (allowing unauthorized users to read arbitrary files), and CVE-2019-3976, an SMB stack overflow (enabling remote code execution).66% similarUnverifiedFixed a security issue where Edit/Write/Read permission rule paths containing parentheses caused rules to be deemed invalid or ignored by the Bash sandbox, resulting in read-only folders actually being writable64% similarUnverifiedIn 2023, a path traversal vulnerability CVE-2023-39522 in Authentik was disclosed, allowing unauthenticated users to access internal API endpoints.64% similarUnverifiedOAuth 2.1 mandates the use of PKCE (Proof Key for Code Exchange) to prevent authorization code interception attacks.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/982034API
curl https://kongchang.com/api/v1/knowledge/claims/982034MCP
get_claim(id=982034)