6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-26057

CVE-2026-26057: Skill Scanner Unsecured Network Binding Vulnerability

Skill Scanner is a security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. A vulnerability in the API Server of Skill Scanner could allow a unauthenticated, remote attacker to interact with the server API and either trigger a denial of service (DoS) condition or upload arbitrary files. This vulnerability is due to an erroneous binding to multiple interfaces. An attacker could exploit this vulnerability by sending API requests to a device exposing the affected API Server. A successful exploit could allow the attacker to consume an excessive amount of resources (memory starvation) or to upload files to arbitrary folders on the affected device. This vulnerability affects Skill-scanner 1.0.1 and earlier releases when the API Server is enabled. The API Server is not enabled by default. Skill-scanner software releases 1.0.2 and later contain the fix for this vulnerability.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-26057

CVE-2026-26057:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
cisco-ai-skill-scanner	pip	< 1.0.2	1.0.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is caused by the Skill Scanner API server binding to all network interfaces (0.0.0.0) by default, instead of just the local machine (localhost). This allows any remote attacker on the same network to access the API, leading to potential denial-of-service attacks or arbitrary file uploads. The analysis of the provided patch commit clearly shows the change in the default host from '0.0.0.0' to 'localhost' in two key places. The first is the run_server function in skill_scanner/api/api_server.py, which is the core function for starting the server. The second is the main function in skill_scanner/api/api_cli.py, which provides the command-line interface for starting the server and used the same insecure default. Therefore, both of these functions are identified as the vulnerable functions that would be part of the execution flow when the vulnerability is present.

Vulnerable functions

skill_scanner.api.api_server.run_server

skill_scanner/api/api_server.py

This function starts the API server. The vulnerability lies in the default value of the 'host' parameter, which was '0.0.0.0'. This caused the server to bind to all network interfaces, exposing it to remote attackers. The patch changes the default to 'localhost', restricting access.

skill_scanner.api.api_cli.main

skill_scanner/api/api_cli.py

This function is the entry point for the 'skill-scanner-api' command-line tool. It defines the command-line arguments and their default values. The '--host' argument had a default value of '0.0.0.0', which would then be passed to the 'run_server' function. This is a vulnerable entry point for starting the server with the insecure default.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.