Security1 hOctober 25, 2026, 09:59

Cognition open-sources Devin plugin to patch critical RCE flaws

Cognition released the free, MIT-licensed Devin Vulnerability Fixes plugin, a set of three agent skills that patch PHP2Shell, the October 21, 2026 Node.js flaws and GitLab CVE-2026-110264 (CVSS 10.0). It runs in Devin, Claude Code, Codex, Cursor and other SKILL.md-compatible agents.

MarkTechPost

Open source

Three skills: fix-php-vuln, fix-node-vuln and fix-gitlab-vuln under MIT
PHP2Shell: CVE-2026-109618 and CVE-2026-109619 rated CVSS 9.2
GitLab CVE-2026-110264: integer overflow, CVSS 10.0, affects versions from 7.0
Each skill inventories, waits for approval, tests and ships one PR per repo

#Cognition#Devin#GitLab#PHP

Patches released for critical RCE flaws in PHP, GitLab and Node.js

Security

Critical GitLab flaw (CVSS 10.0) allows unauthenticated RCE

Security

GitLab warns of critical RCE flaw in AI Gateway service

Security

Cognition open-sources Devin plugin to patch critical RCE flaws

Patches released for critical RCE flaws in PHP, GitLab and Node.js

Critical GitLab flaw (CVSS 10.0) allows unauthenticated RCE

GitLab warns of critical RCE flaw in AI Gateway service

GitLab Patches CVSS 9.9 RCE in Its AI Gateway