Introducing Zero, our AI assistant for AppSec teams. Not a chatbot. A persistent agent built on top of our SAST, SCA, and code intelligence. Bug bounty report comes in: Zero analyzes it, proposes a fix, creates detection rules, scans the org. CVE drops: Zero checks reachability, notifies the right teams, opens follow-ups, escalates if SLAs slip. Security teams should be focused on decisions that need them. Zero handles the rest. zeropath.com/blog/introducin…

We're launching our AI Assistant Tuesday. Thursday we're live with @JamesBerthoty from @latiotech breaking down what agents actually mean for appsec teams in practice. 45 min, live demo. May 14 · 1pm EST. Register: us06web.zoom.us/webinar/regi…

ZeroPath Research discovered CVE-2026-39816, a high severity vulnerability in Apache NiFi. Prior to version 2.9.0, an oversight in the permission model allowed users without the EXECUTE_CODE permissions to run arbitrary code. For more details and a POC: zeropath.com/blog/nifi-cve-2…

ZeroPath discovered CVE-2026-42167 in ProFTPd, one of the internet's most popular FTP daemons. The flaw allows for auth bypass and even pre-auth RCE in some configurations. Update to 1.3.9a now! zeropath.com/blog/proftpd-cv… Take a look at the blog for technical details and a working POC.

Walkthrough: exploiting ZeroPath's new critical severity Spinnaker vulns for code execution and production environment access. (CVE-2026-32604 and CVE-2026-32613) youtu.be/ma-00ggxSp4

We've discovered two critical (CVSS 10.0) flaws in the popular Spinnaker continuous delivery platform. Both allow attackers to execute arbitrary code and steal production source control and cloud credentials. MITRE has assigned the vulnerabilities CVE-2026-32604 and CVE-2026-32613. Detailed write up with POCs: zeropath.com/blog/spinnaker-…

Reducing the total amount of work that hits developers in the first place comes from depth of analysis. The more context ZeroPath has about a codebase, the higher the coverage, the more it can auto-remediate before anything surfaces in a PR. Fewer findings. More auto-patched. Less time spent by developers who should be shipping product.

The current version of RAGFlow (0.24) contains an unpatched vulnerability that allows low-privilege authenticated attackers to execute arbitrary code. Blog: zeropath.com/blog/ragflow-rc… POC: github.com/ZeroPathAI/ragflo… Video Walkthrough: youtube.com/watch?v=1F-27CIl…

How good is Opus 4.6 by itself at vuln detection? Given raw code, a simple prompt and some tools, we found it finds about 1 in 4 simple C vulnerabilities, at the cost of a high FP rate and unstable results. zeropath.com/blog/benchmarki… Requiring structured justification or using tool calls to verification agents improved results, but we believe that more sophisticated engineering around the model is likely necessary for enterprise use at scale.

CrackArmor included one of 36 sudo flaws previously discovered by ZeroPath. We're releasing the whole batch today, including a POC for remote code execution in sudo logsrvd! Not all mainstream linux distributions have included patches for these issues in their sudo packages yet. Worth verifying you're not vulnerable. zeropath.com/blog/sudo-bug-f…

@qualys just published the CrackArmor advisory describing a chain of vulnerabilities in AppArmor that can allow an unprivileged attacker to escalate privileges. Part of the exploit chain relies on a vulnerability in sudo originally discovered by the ZeroPath research team last year. sudo changelog: github.com/sudo-project/sudo… CrackArmor advisory: cdn2.qualys.com/advisory/202…

Fun, free exploit development CTFs based on real world CVEs, and accompanied by hints, walkthroughs and working POCs. zeropath.com/blog/zeropath-e… We've distilled complex issues down to repeatable, Dockerized challenges that have the nuance of the real vulnerabilities attackers love without all the noise.