Prompt-Injection — PoC Archivehttps://poc.intelseclab.com/tags/prompt-injection/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Langflow Pre-Auth RCE Mass Scanner (CVE-2026-27966)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27966-langflow-mass-scanner/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27966-langflow-mass-scanner/Critical severity (CVSS 9.8) — web · CVE-2026-27966 (GHSA-3645-fxcv-hqr4). Status: Patched. Affects: Langflow (langflow-ai). Tags: langflow, rce, pre-auth, route-injection, vertex-injection, csv-agent, prompt-injection, python, mass-scanner, ai-security.webCriticallangflowrcepre-authroute-injectionvertex-injectioncsv-agentprompt-injectionpythonmass-scannerai-securityMicrosoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-26030-semantic-kernel-eval-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-26030-semantic-kernel-eval-rce/Critical severity — misc · CVE-2026-26030. Status: Weaponized. Affects: Microsoft Semantic Kernel (Python), InMemoryCollection vector store connector. Tags: semantic-kernel, python, eval-injection, sandbox-bypass, prompt-injection, llm-agent, rce, ast-allowlist-bypass, vector-store.miscCriticalsemantic-kernelpythoneval-injectionsandbox-bypassprompt-injectionllm-agentrceast-allowlist-bypassvector-storeClaude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-54316-claude-code-webfetch-hf-exfil/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-54316-claude-code-webfetch-hf-exfil/Medium severity — misc · CVE-2026-54316 (GHSA-fg94-h982-f3mm). Status: PoC. Affects: @anthropic-ai/claude-code (npm package, Claude Code CLI). Tags: claude-code, webfetch, prompt-injection, exfiltration, huggingface, allow-list-bypass, agentic-ai, docker-lab, cwe-183.miscMediumclaude-codewebfetchprompt-injectionexfiltrationhuggingfaceallow-list-bypassagentic-aidocker-labcwe-183adx-mcp-server KQL Injection via table_name Parameter (CVE-2026-33980)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33980-adx-mcp-server-kql-injection/High severity (CVSS 8.8) — web · CVE-2026-33980. Status: PoC. Affects: adx-mcp-server (pab1it0/adx-mcp-server). Tags: mcp, kql-injection, azure-data-explorer, ai-agent, prompt-injection, cwe-943, data-exfiltration.webHighmcpkql-injectionazure-data-explorerai-agentprompt-injectioncwe-943data-exfiltrationFirefox Smart Window Private URL Exfiltrationhttps://poc.intelseclab.com/pocs/web/2026-07-03_firefox-smartwindow-private-url-exfil/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_firefox-smartwindow-private-url-exfil/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Firefox Smart Window (AI browsing assistant feature). Tags: firefox, smart-window, ai-assistant, privacy-leak, information-disclosure, url-token-exfiltration, browser, prompt-injection.webHighfirefoxsmart-windowai-assistantprivacy-leakinformation-disclosureurl-token-exfiltrationbrowserprompt-injection