<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: agnai</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-47171: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system</title><link>https://patchthecve.com/cve/CVE-2024-47171.html</link><guid>https://patchthecve.com/cve/CVE-2024-47171.html</guid><pubDate>Wed, 17 Jun 2026 07:56:40 +0000</pubDate><description>MEDIUM 4.3: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directori</description></item><item><title>CVE-2024-47170: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system</title><link>https://patchthecve.com/cve/CVE-2024-47170.html</link><guid>https://patchthecve.com/cve/CVE-2024-47170.html</guid><pubDate>Wed, 17 Jun 2026 07:56:40 +0000</pubDate><description>MEDIUM 4.3: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue can lead to unauthorized access to sensitive information and e</description></item><item><title>CVE-2024-47169: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system</title><link>https://patchthecve.com/cve/CVE-2024-47169.html</link><guid>https://patchthecve.com/cve/CVE-2024-47169.html</guid><pubDate>Wed, 17 Jun 2026 07:56:39 +0000</pubDate><description>HIGH 8.8: Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the execution of commands within those files.</description></item></channel></rss>