🚨 CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache__ entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports a CERTIFIED verdict with high trust scores in both static and semantic analysis modes.
🎖@cveNotify
GitHub
GitHub - agentverus/agentverus-scanner: Trust, but verify. Security scanner for AI agent skills. Detects prompt injection, data…
Trust, but verify. Security scanner for AI agent skills. Detects prompt injection, data exfiltration, and 10 ASST threat categories that antivirus misses. - agentverus/agentverus-scanner
September 2, 2026 44 1
