AI Radar

Tuesday, November 10, 2026

Today in AI

Security 9Last 14 days

CriticalCVSS 9.1CVE-2026-102894GHSA-62m9-f875-rqw6gpustack (pip)Affected >= 0.7.1, < 2.2.2 · Fixed in 2.2.2Advisory

A GitHub advisory says GPUStack's SAML callback decodes a posted SAMLResponse and issues a session token without verifying it.

  • Affected: gpustack (pip) >= 0.7.1, < 2.2.2
  • Patched version: 2.2.2

high evidence1 sourcefirst seen Nov 10

CriticalCVSS 9.8CVE-2026-102895GHSA-gj9m-f8ph-pmhrgpustack (pip)Affected < 2.2.0 · Fixed in 2.2.0Advisory

A GitHub advisory says GPUStack before v2.2.0 treats requests from a loopback source as the built-in administrator when force_auth_localhost is False, the default.

  • Affected: gpustack (pip) < 2.2.0
  • Patched: 2.2.0

high evidence1 sourcefirst seen Nov 9

HighCVSS 8.8CVE-2026-103002GHSA-3hch-x692-6qj3gpustack (pip)Affected >= 2.2.0, < 2.2.2 · Fixed in 2.2.2Advisory

A GitHub advisory says GPUStack's cluster_apiserver_proxy handler skipped resource-level authorization checks.

  • Affected: gpustack (pip) >= 2.2.0, < 2.2.2
  • Patched version: 2.2.2

high evidence1 sourcefirst seen Nov 10

HighCVE-2026-88968GHSA-5xjx-9qx6-jcrv@anthropic-ai/claude-code (npm)Affected < 2.1.251 · Fixed in 2.1.251Advisory

GitHub published an advisory for a time-of-check to time-of-use race in the Claude Code Edit tool.

  • Affected: @anthropic-ai/claude-code npm versions below 2.1.251
  • Patched in 2.1.251

high evidence1 sourcefirst seen Nov 9

Notion says a security incident at its vendor Fireworks AI may have exposed some Notion AI chat sessions.

  • Affected: under 1% of Notion workspaces, per Notion
  • Notion no longer serves open-weight models via Fireworks

high evidence3 sourcesfirst seen Nov 9

A Bluesky post links to an Ars Technica article claiming that Claude Code settings files have exposed thousands of secrets on GitHub.

Why it matters: If the claim holds, committed Claude Code settings files may leak API keys, so developers should check their repos and rotate any exposed secrets.

low evidence1 sourcefirst seen Nov 9

Topics by category

Industry10

7 more in Industry

Bloomberg reports, citing an updated S-1 prospectus released Tuesday, that Anthropic's seven co-founders will sell $1.75 billion of stock in next week's IPO.

  • Total co-founder sale: $1.75B
  • About $250M each at the midpoint of the range

medium evidence1 sourcefirst seen Nov 10

At Adobe Max on Nov 10, 2026, Adobe previewed local MCP integrations for Creative Cloud.

Why it matters: Local MCP integrations let third-party agents edit native Photoshop, Illustrator, Premiere and After Effects project files, though they are only previewed so far.

high evidence5 sourcesfirst seen Nov 10

Anthropic launched its IPO roadshow, planning to sell 825M Class A shares at $70 to $78 each on Nasdaq.

medium evidence2 sourcesfirst seen Nov 10

New models5

Anthropic announced Claude Fable 5.2 and Mythos 5.2. A post says Fable 5.2 scores 65 on Artificial Analysis, the highest so far. The cluster also holds unrelated model listings.

  • Artificial Analysis score for Fable 5.2: 65, highest so far
  • Items also list Gemini 4 Carbon as newly available from Google

high evidencetrending6 sourcesfirst seen Oct 30

2 more in New models

Coding agents3

The pktq/lasik GitHub repo offers a static CLI and MCP server.

medium evidence1 sourcefirst seen Nov 9

Boxes

19

Amp introduces Boxes, always-on cloud computers for deploying apps, starting at $18 per 30 days.

high evidence1 sourcefirst seen Nov 10

  • Boxesampcode.com · Ampcode · 17h ago

Open source / local1

Research3

Google DeepMind introduced AlphaProof Code, a multi-LLM agentic framework for formal verification.

  • Announcement date: November 10, 2026

high evidence2 sourcesfirst seen Nov 10

Scale Labs and CAIS' Remote Labor Index, as reported by The Decoder, says Fable 5.2 completes 41.3% of freelance projects at professional quality.

  • Fable 5.2: 41.3% of projects
  • Opus 5.5: 21.3%

medium evidence1 sourcefirst seen Nov 8

Guides1

AWS posts cover Bedrock Managed Knowledge Base retrieval, a seven-layer agentic reference architecture on AgentCore, and CrossnoKaye and TCS use cases. Another covers a Bedrock tokenomics data lake.

high evidence5 sourcesfirst seen Nov 9

Tools / repos8

5 more in Tools / repos