- Critical 10.0
CVE-2026-61732
Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results, the output of agent reconnaissance against target services, into LLM messages without neutralizing ChatML special-token literals. Under the BYOK (Bring Your Own Key) deployment model, users configure their own LLM credentials to any OpenAI-compatible endpoint. Most open-source and self-deployed model providers (vLLM, SGLang, Ollama, LM Studio, text-generation-webui, etc.) do not filter special-token literals from user content in their default configurations. Those literals are parsed in…
Scores
The facts
- Published
- 24 September 2026
- Last changed
- 30 September 2026
- NVD status
- Deferred
- Severity
- Critical, CVSS 10.0 out of 10 (version 3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- Known exploited
- Not in the CISA Known Exploited Vulnerabilities catalogue in this build.
- EPSS
- 1.2% chance of exploitation activity in the next 30 days (percentile 68).
Is there a Securelyn advisory?
Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.