Issues

• ES2609-46011d92 - Improper Validation of Persistent AI Context State

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#226 · Filter by author cmullaly-mitre opened on Oct 1, 2026

• ES2609-4e5b4da0 - Emission of Sensitive Information Before Incremental Inspection Can Complete

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#225 · Filter by author cmullaly-mitre opened on Sep 28, 2026

• ES2609-7b54439f - Improper Enforcement of Explicit Session Termination

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#224 · Filter by author cmullaly-mitre opened on Sep 21, 2026

• ES2609-707f9982 - Improper Handling of Filesystem Name-Equivalence Semantics in Security Controls

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#223 · Filter by author cmullaly-mitre opened on Sep 14, 2026

• ES2609-b86fc2c1 - Insufficient Verification of Authorization Prior to Recovery-Channel Identity Binding (PEW - Phantom Entity Weaponization)

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#222 · Filter by author cmullaly-mitre opened on Sep 14, 2026

• ES2609-739b4868 - Insufficient Constraints in Cryptographic Proof Relations

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#221 · Filter by author cmullaly-mitre opened on Sep 14, 2026

• ES2609-30497030 - Inconsistent Enforcement of Object-Level Authorization Across Operation Types

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#220 · Filter by author cmullaly-mitre opened on Sep 14, 2026

• ES2609-8f429561 - Unverified Modification of Structured Data Leading to Identity-Graph Downgrade

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#219 · Filter by author cmullaly-mitre opened on Sep 14, 2026

• ES2609-6b14fb54 - Modify CWE-190 to include time-related content

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#218 · Filter by author cmullaly-mitre opened on Sep 14, 2026

• ES2608-94e48d11 - Credential Destination Injection

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#217 · Filter by author cmullaly-mitre opened on Aug 28, 2026

• ES2608-c6cae038 - Various Improvements to CWE-88

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#216 · Filter by author cmullaly-mitre opened on Aug 28, 2026
  

• ES2608-28b3382f - Modify CWE-69 to Include Info about Alternate Data Stream Filename Gate Bypass

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#215 · Filter by author cmullaly-mitre opened on Aug 17, 2026

• ES2608-19c574c5 - Prompt injection in open source software which is triggered only when interpreted by an AI

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#214 · Filter by author cmullaly-mitre opened on Aug 17, 2026

• ES2608-a21c00a6 - Missing Revalidation of Attested State Before Security-Sensitive Use

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#213 · Filter by author cmullaly-mitre opened on Aug 17, 2026

• ES2608-993fe625 - Reliance on Embedding Similarity for Security-Sensitive Resource Selection

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#212 · Filter by author cmullaly-mitre opened on Aug 17, 2026

• ES2608-5df528b1 - Modify CWE-348 to Improve Discoverability

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#211 · Filter by author cmullaly-mitre opened on Aug 17, 2026

• ES2608-8a08a8f6 - Reliance on Preservation of Authentication Material Placed Outside the Protocol's Declared Message Boundary

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#210 · Filter by author cmullaly-mitre opened on Aug 17, 2026

• ES2607-f7b34142 - Improper Enforcement of Safety Policy Across Intent-Equivalent Inputs in LLM-Based Software

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#209 · Filter by author stevechristeycoley opened on Aug 7, 2026
  1

• ES2607-4e79f13a - Improper Validation of Identifier Uniqueness After Lossy Normalization

  External-SubmissionPhase02-Ack-Receiptrelated-to-ai
  CWE-CAPEC/CWE-Content-Development-Repository#208 · Filter by author cmullaly-mitre opened on Jul 15, 2026
  2

• ES2607-10364d0c - Reliance on a Non-Deterministic Evaluator for a Security Decision

  External-SubmissionPhase02-Ack-Receiptrelated-to-ai
  CWE-CAPEC/CWE-Content-Development-Repository#207 · Filter by author cmullaly-mitre opened on Jul 15, 2026

• ES2606-11f89c19 - Emergent Trust Boundary Violation (ETBV)

  External-SubmissionPhase04-Init-Consultrelated-to-hwSUB.ATTACKSUB.RELREFS
  CWE-CAPEC/CWE-Content-Development-Repository#206 · Filter by author cmullaly-mitre opened on Jun 29, 2026
  14

  

• ES2606-acab2eba - Incorrect mode of operation selection when using cryptographic block cipher primitives

  External-SubmissionPhase02-Ack-Receipt
  CWE-CAPEC/CWE-Content-Development-Repository#205 · Filter by author cmullaly-mitre opened on Jun 29, 2026

• ES2606-64e040da - Improper Isolation of Task-Relevant Context

  External-SubmissionPhase03-Init-Reviewrelated-to-ai
  CWE-CAPEC/CWE-Content-Development-Repository#204 · Filter by author stevechristeycoley opened on Jun 26, 2026
  2

• ES2605-6b802369 - Reliance on Asynchronous Work Cancellation as Resource Lifetime Barrier

  External-SubmissionPhase03-Init-Review
  CWE-CAPEC/CWE-Content-Development-Repository#203 · Filter by author cmullaly-mitre opened on Jun 8, 2026
  1

• ES2605-2daaff2c - Failure to Revoke Previously Registered Passkeys During Account Recovery

  External-SubmissionPhase03-Init-Review
  CWE-CAPEC/CWE-Content-Development-Repository#202 · Filter by author cmullaly-mitre opened on May 28, 2026
  1