Critical
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
Type: advisorySource: Official CVE List
Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML spe…
Products: Decepticon, decepticon-core, decepticon-sdkCVEs: CVE-2026-61732