Collibra Platform Agent Flaws Allow Remote Code Execution Without Authentication

### Executive Summary: A critical threat advisory describes two vulnerabilities in the Collibra Platform Agent — unauthenticated privileged REST endpoints that fail to enforce auth (CVE-2026-10622) and a Zip Slip extraction flaw allowing directory traversal and deployment of web shells leading to root RCE (CVE-2026-10621). The flaws can be chained by remote unauthenticated actors, particularly on installations reachable from the public internet; vendor patches and network hardening are strongly recommended immediately.