Evidence-gated vulnerability research

Findings you can
actually prove.

VulntraceAI traces source to sink, scores its own confidence, and keeps the advisory locked until you've validated the proof-of-concept on your own machine.

Open Workspace
npx vulntraceai@latest·macOS & Windows · local-first
finding · live
PoC ready
71HIGH

FTP ignores --upload-only

8.5HIGH

goshs · archetype G

sourceftpserver.go:101 AuthUser
sinkRETR / LIST / DELE served
no upload-only branch → full filesystem

Disclosure locked

validate the PoC to unlock

The gate

The report stays locked until it's real.

No advisory, no CVSS, no disclosure text is generated until a human runs the PoC and confirms it. The lock is enforced in code, not in a guideline — so a finding can never ship unproven.

Discovered
Triaged
PoC ready
Validating
Validated
Disclosure ready

unlock_reporting() needs your explicit confirmation plus ≥2 independent evidence signals. Model reasoning alone can never open it.

Track record

Proven, then disclosed.

Every row is a validated, publicly-credited advisory — not a scanner hit.

spotlight
9.8CRITICAL
94CONFIRMED
source controllable
sanitizer absent
boundary crossed
PoC validated

Empty-username SFTP auth bypass

goshs · CVE-2026-40884

sourcessh.ServerConn{User:""}
sinkPasswordCallback() ⇒ ok
blank username skips the credential check
cvefindingcvss
  • CVE-2026-47140vm2Sandbox escape to RCE10.0CRITICAL
  • CVE-2026-40884goshsEmpty-username SFTP auth bypass9.8CRITICAL
  • CVE-2026-42596GotenbergUnauthenticated SSRF via deny-list bypass9.4CRITICAL
  • CVE-2026-40289PraisonAIUnauth WebSocket session hijack9.1CRITICAL
  • CVE-2026-40876goshsSFTP root escape via prefix validation8.7HIGH
  • CVE-2026-42221nginx-uiFirst-run installer to admin claim8.1HIGH
0proven disclosures
0critical
0projects
How it works

Five steps. One verified disclosure.

01

Scan a repo

Point the local Companion at owner/repo. Eight phases run on your machine — your code never leaves it.

02

Score & triage

Each candidate gets a multi-signal confidence score. Lone pattern hits are capped low by design.

03

Generate a PoC

A safe, local-only verifier with a negative control. We tell you to stop and run it yourself.

04

Validate

Run it, confirm the evidence, type the phrase. The lock springs open — and only then.

05

Disclose

Advisory, CVSS v4, and a maintainer-acceptance estimate. You file it privately. We never auto-submit.

Recon → Architecture → Intent → Advisories → Attack surface → Deep analysis → Validation → Report

Stop shipping maybes. Ship proof.

Run it from the browser, or keep everything local with the Companion.

Open Workspace