# CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic

Status: published. Published: 2026-05-15. Updated: 2026-11-10.

In the Linux kernel, the following vulnerability has been resolved:

ptrace: slightly saner 'get_dumpable()' logic

The 'dumpability' of a task is fundamentally about the memory image of
the task - the concept comes from whether it can core dump or not - and
makes no sense when you don't have an associated mm.

And almost all users do in fact use it only for the case where the task
has a mm pointer.

But we have one odd special case: ptrace_may_access() uses 'dumpable' to
check various other things entirely independently of the MM (typically
explicitly using flags like PTRACE_MODE_READ_FSCREDS).  Including for
threads that no longer have a VM (and maybe never did, like most kernel
threads).

It's not what this flag was designed for, but it is what it is.

The ptrace code does check that the uid/gid matches, so you do have to
be uid-0 to see kernel thread details, but this means that the
traditional "drop capabilities" model doesn't make any difference for
this all.

Make it all make a *bit* more sense by saying that if you don't have a
MM pointer, we'll use a cached "last dumpability" flag if the thread
ever had a MM (it will be zero for kernel threads since it is never
set), and require a proper CAP_SYS_PTRACE capability to override.

## Remediation

- fix: RHSA-2026:19540: NVIDIA for RHEL 10

RHSA-2026:33486: NVIDIA for RHEL 10

RHSA-2026:21701: Red Hat OpenShift Container Platform 4.20

RHSA-2026:21702: Red Hat OpenShift Container Platform 4.20

RHSA-2026:20299: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)

RHSA-2026:19569: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:19705: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)

RHSA-2026:20593: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:20054: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)

RHSA-2026:20129: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)

RHSA-2026:19568: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:19666: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)

RHSA-2026:23470: Red Hat Enterprise Linux BaseOS (v. 8)

RHSA-2026:20130: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)

RHSA-2026:20051: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)

RHSA-2026:19521: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)

RHSA-2026:23471: Red Hat Enterprise Linux BaseOS E4S (v.8.8)

RHSA-2026:23469: Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:24814: Red Hat Enterprise Linux BaseOS E4S (v.9.4)

RHSA-2026:23468: Red Hat Enterprise Linux BaseOS EUS (v.9.6)

RHSA-2026:19664: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)

RHSA-2026:19711: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)

RHSA-2026:19875: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) (source: ADP: redhat-SADP)
- workaround: See the security bulletin for a detailed mitigation procedure. (source: ADP: redhat-SADP)

## Affected products and versions

- Linux / Linux: ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6 (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 15b828a46f305ae9f05a7c16914b3ce273474205 (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 4709234fd1b95136ceb789f639b1e7ea5de1b181 (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 8f907d345bae8f4b3f004c5abc56bf2dfb851ea7 (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 2a93a4fac7b6051d3be7cd1b015fe7320cd0404d (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 01363cb3fbd0238ffdeb09f53e9039c9edf8a730 (affected, git); ≥ bfedb589252c01fa505ac9f6f2a3d5d68d707ef4; < 31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a (affected, git); d5b3e840dbf6dd2c0f30b5982b6f5ecd49e46b12 (affected, git); 03eed7afbc09e061f66b448daf7863174c3dc3f3 (affected, git); e45692fa1aea06676449b63ef3c2b6e1e72b7578 (affected, git); 694a95fa6dae4991f16cda333d897ea063021fed (affected, git); ≥ 3.16.52; < 3.17 (affected, semver); ≥ 4.4.40; < 4.5 (affected, semver); ≥ 4.8.16; < 4.9 (affected, semver); ≥ 4.9.1; < 4.10 (affected, semver). Source: CNA: Linux
- Linux / Linux: 4.10 (affected); ≥ 0; < 4.10 (unaffected, semver); ≥ 5.10.256; ≤ 5.10.* (unaffected, semver); ≥ 5.15.207; ≤ 5.15.* (unaffected, semver); ≥ 6.1.173; ≤ 6.1.* (unaffected, semver); ≥ 6.6.139; ≤ 6.6.* (unaffected, semver); ≥ 6.12.89; ≤ 6.12.* (unaffected, semver); ≥ 6.18.31; ≤ 6.18.* (unaffected, semver); ≥ 7.0.8; ≤ 7.0.* (unaffected, semver); ≥ 7.1; ≤ * (unaffected, original_commit_for_fix). Source: CNA: Linux
- Red Hat / NVIDIA for RHEL 10 (kernel): ≥ 0:6.12.0-211.8.el10nv; < * (unaffected, rpm); ≥ 0:6.12.0-231.12.el10nv; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 10 (kernel): ≥ 0:6.12.0-211.16.1.el10_2; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support (kernel): ≥ 0:6.12.0-55.75.1.el10_0; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8 (kernel-rt): ≥ 0:4.18.0-553.125.1.rt7.466.el8_10; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8 (kernel): ≥ 0:4.18.0-553.125.1.el8_10; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8 (kpatch-patch): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (kernel): ≥ 0:4.18.0-305.192.1.el8_4; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (kernel): ≥ 0:4.18.0-305.192.1.el8_4; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (kernel): ≥ 0:4.18.0-372.193.1.el8_6; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service (kernel): ≥ 0:4.18.0-372.193.1.el8_6; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (kernel): ≥ 0:4.18.0-372.193.1.el8_6; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service (kernel): ≥ 0:4.18.0-477.143.1.el8_8; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (kernel): ≥ 0:4.18.0-477.143.1.el8_8; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (kpatch-patch): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9 (kernel): ≥ 0:5.14.0-687.10.1.el9_8; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (kernel): ≥ 0:5.14.0-70.180.1.el9_0; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (kernel-rt): ≥ 0:5.14.0-70.180.1.rt21.252.el9_0; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (kernel): ≥ 0:5.14.0-284.172.1.el9_2; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (kernel-rt): ≥ 0:5.14.0-284.172.1.rt14.457.el9_2; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (kpatch-patch): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support (kernel): ≥ 0:5.14.0-427.126.1.el9_4; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions (kpatch-patch): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support (kernel): ≥ 0:5.14.0-570.116.1.el9_6; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support (kpatch-patch): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat OpenShift Container Platform 4.20 (cri-o): ≥ 0:1.33.12-3.rhaos4.20.git64c6a00.el9; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat OpenShift Container Platform 4.20 (kernel): ≥ 0:5.14.0-570.117.1.el9_6; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat OpenShift Container Platform 4.20 (openshift): ≥ 0:4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat OpenShift Container Platform 4.20 (openshift-clients): ≥ 0:4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat OpenShift Container Platform 4.20 (rhcos): ≥ 4.20.9.6.202605270908-0; < * (unaffected, rpm). Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 6 (kernel): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 7 (kernel): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat Enterprise Linux 7 (kernel-rt): Version range not reported. Source: ADP: redhat-SADP
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift/ose-rhel-coreos-9): Version range not reported. Source: ADP: redhat-SADP
- Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): ≥ V3.1.6; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0): ≥ V3.1.7; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): ≥ V3.1.6; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0): ≥ V3.1.7; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): ≥ V3.1.6; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0): ≥ V3.1.7; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): ≥ V3.1.6; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0): ≥ V3.1.7; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): ≥ V3.1.6; < * (affected, custom). Source: ADP: siemens-SADP
- Siemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0): ≥ V3.1.7; < * (affected, custom). Source: ADP: siemens-SADP

## Severity and prioritization

- CVSS 3.1: 7.1 (high); CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N; source: CNA: Linux

- CVSS 3.1: 7.8 (high); CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; source: ADP: redhat-SADP

- CISA KEV: No listing in collected sources

- EPSS: 4.30% as of 2026-11-09; percentile 91.21%

- SSVC: exploitation poc; automatable no; technical impact total; source ADP: CISA-ADP

- Weaknesses: CWE-269

## Exploit evidence

- exploit: https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/ (ADP: CISA-ADP)

## References

- https://git.kernel.org/stable/c/93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6 (CNA: Linux)

- https://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205 (CNA: Linux)

- https://git.kernel.org/stable/c/4709234fd1b95136ceb789f639b1e7ea5de1b181 (CNA: Linux)

- https://git.kernel.org/stable/c/8f907d345bae8f4b3f004c5abc56bf2dfb851ea7 (CNA: Linux)

- https://git.kernel.org/stable/c/6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d (CNA: Linux)

- https://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d (CNA: Linux)

- https://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730 (CNA: Linux)

- https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a (CNA: Linux)

- http://www.openwall.com/lists/oss-security/2026/05/15/9 (ADP: CVE)

- https://lists.debian.org/debian-lts-announce/2026/05/msg00032.html (ADP: CVE)

- https://lists.debian.org/debian-lts-announce/2026/05/msg00035.html (ADP: CVE)

- http://www.openwall.com/lists/oss-security/2026/05/20/14 (ADP: CVE)

- http://www.openwall.com/lists/oss-security/2026/05/20/16 (ADP: CVE)

- https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/ (ADP: CISA-ADP; exploit)

- https://access.redhat.com/security/cve/CVE-2026-46333 (ADP: redhat-SADP; vdb-entry, x_refsource_REDHAT)

- https://bugzilla.redhat.com/show_bug.cgi?id=2477802 (ADP: redhat-SADP; issue-tracking, x_refsource_REDHAT)

- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46333.json (ADP: redhat-SADP; x_sadp-csaf-vex)

- https://access.redhat.com/errata/RHSA-2026:19540 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:33486 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:21701 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:21702 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:20299 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19569 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19705 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:20593 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:20054 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:20129 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19568 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19666 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:23470 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:20130 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:20051 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19521 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:23471 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:23469 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:24814 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:23468 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19664 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19711 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:19875 (ADP: redhat-SADP; vendor-advisory, x_refsource_REDHAT)

- https://cert-portal.siemens.com/productcert/html/ssa-019113.html (ADP: siemens-SADP)

- https://cert-portal.siemens.com/productcert/html/ssa-457936.html (ADP: siemens-SADP)

## Provenance

- CNA: Linux: https://www.cve.org/CVERecord?id=CVE-2026-46333; retrieved 2026-11-10; source updated 2026-11-10

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-46333; retrieved 2026-11-10; source updated Not reported

Revision: fa88e89f743321a7aed6b16059767fa5ce99980a1b818ad1438ae78c66deee8e

Canonical: https://y2.dev/cve/CVE-2026-46333

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.