🔒 correctover-security-audit
AI Agent Vulnerability Scanner — powered by CCS fault taxonomy v2.5.
Quick Start
pip install correctover-security-audit
correctover-security-audit quick
What It Does
Scans MCP configurations, Agent code, and framework implementations for:
- Command Injection (CWE-78)
- SSRF (CWE-918)
- Credential Exposure (CWE-200)
- Path Traversal (CWE-22)
- SQL/NoSQL Injection (CWE-89)
- Fail-Open Bypass (CWE-636)
Database
Values are the actual contents of the bundled CCS taxonomy v2.5 (verified 2026-08-22):
| Metric | Value |
|---|---|
| Detection rules | 32 |
| Fault types (CCS v2.5) | 32 |
| High-confidence rules | 14 |
| ZDI bounty cases | 52 |
| Verified PoCs | 8 |
| CVEs referenced | 4 |
CVE Attribution (verified 2026-08-22)
| CVE | Real target | CVSS | Status |
|---|---|---|---|
| CVE-2026-42271 | LiteLLM | 8.8 | verified |
| CVE-2026-25536 | MCP TypeScript SDK race condition | 7.1 | verified |
| CVE-2026-12957 | AWS Language Servers | 7.8 (v4.0: 8.5) | verified (NVD 2026-08-22) |
| CVE-2026-55646 | vLLM DoS | 6.5 | verified (NVD 2026-08-22) |
| CVE-2026-56274 | Flowise AI MCP Server | — | PoC with CVE assigned |
Free Tier
50 scans/day — no credit card required.
Unlock unlimited: correctover.com/checkout
export CORRECTOVER_LICENSE_KEY=your-key-here
Related Correctover Tools
| Tool | Install | Description |
|---|---|---|
| Security Scanner | npx correctover-scan |
MCP config security audit（checks 数未核实） |
| Self-Healing Test | pip install correctover-test |
Agent self-healing test suite（3 scenarios × 3 frameworks） |
| Vulnerability Scan | pip install correctover-security-audit |
32 detection rules (CCS v2.5) |
| Compliance Check | pip install correctover-compliance-check |
OAuth 2.1 + CCS v1.0 (18 checks) |
| Runtime Guard | pip install correctover-runtime-guard |
RCE/SSRF interception (P50 ≈ 2011µs local measurement) |
| MCP Server | npm install correctover-mcp-server |
Compatibility package（已退役，转发至 correctover-mcp-gateway） |
Website: correctover.com · GitHub: github.com/Correctover
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file correctover_security_audit-1.4.1.tar.gz.
File metadata
- Download URL: correctover_security_audit-1.4.1.tar.gz
- Upload date:
- Size: 20.9 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.12.8
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
67293157ef75a770961c1e6aa7a1e3899d5ea18757be9745faf00e8f0d93e3d3
|
|
| MD5 |
59f0fc7d945f6cd9471784e8bd621bf1
|
|
| BLAKE2b-256 |
b47f3999f27c6c56c4fee7d71cce87a38cb6f04e93847317139b65a584a3c942
|
File details
Details for the file correctover_security_audit-1.4.1-py3-none-any.whl.
File metadata
- Download URL: correctover_security_audit-1.4.1-py3-none-any.whl
- Upload date:
- Size: 24.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.12.8
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
170f6bfcaed3ec6ad40854c9939f3317814ada4716b2c2053b7cba9acca3e3e8
|
|
| MD5 |
29fbfdc6bf4538c894429a55be2880a1
|
|
| BLAKE2b-256 |
42b44a0468031e236071abf1368611bd32377ef00b8fca77ef3cf095ff7052cc
|
