CodeAnt AI

Product

Resources

Customers

Enterprise

Pricing

Book a demo

CodeAnt AI

Book a demo

Product

Review, secure and pentest every change, from PR to production.

PRODUCT

AI Pentesting

Black-box and whitebox pentests that prove what is exploitable

AI Code Reviews

Line-by-line reviews on every pull request

Code Security Platform

SAST, SCA, secrets and IaC in one place

Code Quality Platform

Quality gates, coverage and dead code

PLATFORM

IDE

Fix issues before you commit

CLI

Scan from any pipeline

Integrations

GitHub, GitLab, Bitbucket, Jira, Slack

Azure DevOps

Reviews and scans inside ADO

Resources

Docs, research and the team behind CodeAnt AI.

RESOURCES

Documentation

Set up, configure and integrate

Benchmark

How CodeAnt compares on real repos

Security Research

CVEs and disclosures from our team

Blogs

Guides and engineering notes

Vulnerability Database

Search known vulnerabilities

COMPANY

About

The team behind CodeAnt AI

Trust Center

Security, compliance and policies

White Paper

Continuous cyber defense, in depth

Customers

Enterprise

Pricing

Book a demo

Actively REsearching

Zero-Days Discovered by
CodeAnt AI Research

Zero-Days Discovered by CodeAnt AI Research

Original Security Research - Vulnerabilities we found, exploits we built, patterns we keep seeing

Book a demo

Start free trial

CVEs found in

pac4j-jwt: The envelope was sealed. Nobody signed the letter.

CVE-2026-29000: Critical pac4j-⁠jwt Auth Bypass Using a Public Key

CVSS 10.0 - Critical

Mar 3, 2026

Read the research

CVE-2026-29000: Critical pac4j-⁠jwt Auth Bypass Using a Public Key

CVSS 10.0 - Critical

Mar 3, 2026

Read the research

All Research

Every vulnerability we've reported, with the reproduction steps and the patch that fixed it.

Xen: The first copy failed. The second skipped the check.

Nov 4, 2026

Xenbleed: The Eleven-Year-Old Shortcut

CVE-2026-102703

CVSS 9.4

PHP: The pointer outlived what it pointed at.

Oct 23, 2026

Inside PHP2Shell’s Broken Request Lifecycle

CVE-2026-109618

CVE-2026-109619

Camunda: The validator ran. Its list was empty.

Oct 16, 2026

CVE-2026-109432: The Validator That Had Nothing to Validate, a Camunda RCE

CVE-2026-109432

CVSS 9.3

Camunda: The list said no. The file came out anyway.

Oct 15, 2026

CVE-2026-109431: The Authorization Check Four Camunda Task Endpoints Skip

CVE-2026-109431

CVSS 8.6

Camunda: Switch off one permission. They all go.

Oct 14, 2026

CVE-2026-109433: How One Disabled Permission Disabled Them All in Camunda Cockpit

CVE-2026-109433

CVSS 7.1

Obsidian: One invisible byte got past the filter.

Oct 12, 2026

From Markdown to a Shell: Two RCEs in Obsidian Desktop

CVE-2026-104077, CVE-2026-104078

CVSS 8.5 & 8.4

Camunda: The count read zero, so setup opened again.

Sep 24, 2026

CVE-2026-77226: How an Empty Admin Group Let Anyone Create a Camunda Administrator

CVE-2026-77226

CVSS 9.2

Claude Code: The first key closed the app. The rest found a terminal.

Sep 21, 2026

Incomplete Recipient Validation in Claude Code Computer Use Enabled Command Execution in an Unapproved Terminal

HackerOne #3985968

High · Triaged

Manus: The invite carried standing orders.

Sep 19, 2026

How a Manus Prompt Injection Turned One Project Invite Into a Desktop Takeover

Meta Bug-bounty Finding

Manus

Claude Code: The keys outlived the window you approved.

Sep 1, 2026

Stale Application Authorization in Claude Code Computer Use Enabled Cross-Application Keystroke Delivery on macOS

HackerOne #3930758

CVSS 7.7

Apache Log4j2: It checked the names. Never the size.

Aug 31, 2026

Dissecting FOIS: Log4j2's Half-Built Deserialization Filter

Vulnerability research

Apache Log4j2

Claude Code: One app never had to be on the list.

Aug 31, 2026

A Finder Authorization Bypass in Claude Code Computer Use on macOS

HackerOne #3885687

CVSS 7.7

Claude Code Action: Relabel the issue. The cutoff moves.

Aug 27, 2026

How a Triage User Injects Into a Claude Code Action Write Run

HackerOne #3918594

CVSS 7.5

Claude Code: The folder changed after the check.

Aug 27, 2026

Claude Code macOS TOCTOU: Breaking the Workspace Boundary

HackerOne #3882177

CVSS 7.7

Dolibarr: One link mints a second admin.

Aug 23, 2026

CVE-2026-71503: Dolibarr Reflected XSS to Admin Takeover

CVE-2026-71503

CVSS 9.3

Dolibarr: Refused at one counter. Accepted at the next.

Aug 23, 2026

CVE-2026-71504: Mass Assignment in Members API via pass

CVE-2026-71504

CVSS 8.3

Dolibarr: It can't read the company. It can reset its password.

Aug 23, 2026

CVE-2026-71505: Dolibarr BOLA Enables Portal Account Takeover

CVE-2026-71505

CVSS 8.1

Aug 23, 2026

CVE-2026-71511: Dolibarr Members API Exposes Password Hashes

CVE-2026-71511

CVSS 6.5

Dolibarr: It never showed the salary. It answered yes or no.

Aug 23, 2026

CVE-2026-71510: Dolibarr SQLFilters Bypass Exposes Payroll

CVE-2026-71510

CVSS 6.5

Aug 23, 2026

CVE-2026-71508: Dolibarr Mass Assignment to Payroll Tampering

CVE-2026-71508

CVSS 6.5

Dolibarr: File the claim. Approve it with the same hand.

Aug 23, 2026

CVE-2026-71509: Dolibarr Mass Assignment Self-Approval Bug

CVE-2026-71509

CVSS 6.5

Dolibarr: Same totals. Same names. A different account.

Aug 23, 2026

CVE-2026-71507: Dolibarr BOLA Redirects Supplier Payments

CVE-2026-71507

CVSS 6.5

Dolibarr: The check asked for the wrong permission.

Aug 23, 2026

CVE-2026-71506: Dolibarr Payment Deletion via Incorrect Authorization

CVE-2026-71506

CVSS 6.5

Mar 11, 2026

CVE-2026-31988: jszip DoS via Malformed ZIP File

CVE-2026-31988

CVSS 6.9

simple-git: The filter only knew lowercase.

Mar 9, 2026

CVE-2026-28292: simple-git RCE via Case-Sensitivity Bypass

CVE-2026-28292

CVSS 9.8

Mar 3, 2026

CVE-2026-29000: pac4j-jwt Auth Bypass PoC With a Public Key

CVE-2026-29000

CVSS 10

Let AI Fix Your Code,

You Build the Future

Start free trial

Get pentest report

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

All systems normal

Product

Company

Developers

Report a Vulnerability

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

All systems normal

Product

Company

Developers

Report a Vulnerability

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

All systems normal

Product

Company

Developers

Report a Vulnerability

Zero-Days Discovered byCodeAnt AI Research

Zero-Days Discovered by CodeAnt AI Research

CVE-2026-29000: Critical pac4j-⁠jwt Auth Bypass Using a Public Key

CVE-2026-29000: Critical pac4j-⁠jwt Auth Bypass Using a Public Key

All Research

Xenbleed: The Eleven-Year-Old Shortcut

Inside PHP2Shell’s Broken Request Lifecycle

CVE-2026-109432: The Validator That Had Nothing to Validate, a Camunda RCE

CVE-2026-109431: The Authorization Check Four Camunda Task Endpoints Skip

CVE-2026-109433: How One Disabled Permission Disabled Them All in Camunda Cockpit

From Markdown to a Shell: Two RCEs in Obsidian Desktop

CVE-2026-77226: How an Empty Admin Group Let Anyone Create a Camunda Administrator

Incomplete Recipient Validation in Claude Code Computer Use Enabled Command Execution in an Unapproved Terminal

How a Manus Prompt Injection Turned One Project Invite Into a Desktop Takeover

Stale Application Authorization in Claude Code Computer Use Enabled Cross-Application Keystroke Delivery on macOS

Dissecting FOIS: Log4j2's Half-Built Deserialization Filter

A Finder Authorization Bypass in Claude Code Computer Use on macOS

How a Triage User Injects Into a Claude Code Action Write Run

Claude Code macOS TOCTOU: Breaking the Workspace Boundary

CVE-2026-71503: Dolibarr Reflected XSS to Admin Takeover

CVE-2026-71504: Mass Assignment in Members API via pass

CVE-2026-71505: Dolibarr BOLA Enables Portal Account Takeover

CVE-2026-71511: Dolibarr Members API Exposes Password Hashes

CVE-2026-71510: Dolibarr SQLFilters Bypass Exposes Payroll

CVE-2026-71508: Dolibarr Mass Assignment to Payroll Tampering

CVE-2026-71509: Dolibarr Mass Assignment Self-Approval Bug

CVE-2026-71507: Dolibarr BOLA Redirects Supplier Payments

CVE-2026-71506: Dolibarr Payment Deletion via Incorrect Authorization

CVE-2026-31988: jszip DoS via Malformed ZIP File

CVE-2026-28292: simple-git RCE via Case-Sensitivity Bypass

CVE-2026-29000: pac4j-jwt Auth Bypass PoC With a Public Key

Let AI Fix Your Code,

Let AI Fix Your Code,

You Build the Future

CodeAnt AI

CodeAnt AI

CodeAnt AI

Zero-Days Discovered by
CodeAnt AI Research