{
  "schemaVersion": 1,
  "incident": {
    "id": "cve-2026-61732",
    "url": "https://cveboard.org/i/cve-2026-61732",
    "urlPt": "https://cveboard.org/pt/i/cve-2026-61732",
    "json": "https://cveboard.org/i/cve-2026-61732.json",
    "kind": "vuln",
    "live": false,
    "knownExploited": false,
    "severity": "critical",
    "title": "Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context",
    "summary": "Decepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK (Bring Your Own Key) deployment model, users configure their own LLM credentials to any OpenAI-compatible endpoint.",
    "titlePt": "Decepticon: falsificação de limite de função via literais de tokens especiais do ChatML na saída de web crawl composta no contexto do LLM",
    "summaryPt": "Decepticon envolve os resultados de web crawl — a saída da reconhecimento de agentes contra serviços-alvo — em mensagens LLM sem neutralizar literais de tokens especiais do ChatML. No modelo de implantação BYOK (Bring Your Own Key), os usuários configuram suas próprias credenciais LLM para qualquer endpoint compatível com OpenAI.",
    "cves": [
      "CVE-2026-61732"
    ],
    "ghsa": "GHSA-g5f9-3xfg-p9mf",
    "cvss": {
      "score": 10,
      "version": "3.1"
    },
    "epss": {
      "percentage": 0.01221,
      "percentile": 0.67503,
      "asOf": "2026-10-23"
    },
    "packages": [
      {
        "ecosystem": "pip",
        "name": "decepticon-core",
        "vulnerable": "<= 1.1.16",
        "fixed": "1.1.17",
        "advisory": "GHSA-g5f9-3xfg-p9mf"
      },
      {
        "ecosystem": "pip",
        "name": "decepticon",
        "vulnerable": "<= 1.1.16",
        "fixed": "1.1.17",
        "advisory": "GHSA-g5f9-3xfg-p9mf"
      },
      {
        "ecosystem": "pip",
        "name": "decepticon-sdk",
        "vulnerable": "<= 1.1.16",
        "fixed": "1.1.17",
        "advisory": "GHSA-g5f9-3xfg-p9mf"
      }
    ],
    "vendor": null,
    "product": null,
    "kev": null,
    "breach": null,
    "retracted": false,
    "sources": [
      {
        "label": "GitHub Advisory Database",
        "url": "https://github.com/advisories/GHSA-g5f9-3xfg-p9mf"
      }
    ],
    "publishedAt": "2026-09-24T19:17:49.000Z",
    "updatedAt": "2026-09-24T19:17:49.000Z"
  },
  "live": false,
  "events": [
    {
      "id": "ghsa:GHSA-g5f9-3xfg-p9mf:ghsa_published:2026-09-24T19:17:49.000Z",
      "incidentId": "cve-2026-61732",
      "type": "ghsa_published",
      "at": "2026-09-24T19:17:49.000Z",
      "detail": {
        "ghsa": "GHSA-g5f9-3xfg-p9mf",
        "severity": "critical",
        "fixed": "1.1.17"
      }
    }
  ]
}