prolix-oc Lumiverse

• CVE-2026-44443 Medium 4.8 Lumiverse: Sign-up nonce race condition allows unauthorized account registration 0.1%
• CVE-2026-44444 Critical 9.1 Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan 0.4%
• CVE-2026-44449 Critical 9.1 Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape 0.5%
• CVE-2026-44451 Critical 9.3 Lumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass 0.2%
• CVE-2026-44450 Critical 9.9 Lumiverse: RCE via MCP stdio argument injection 0.4%