CVE-2026-124574mediumCWE-266CWE-285

CVE-2026-124574: medium-severity vulnerability in chenyme grok2api

chenyme grok2api Video Job Retry video.go beginSelectionSession improper authorization

Published

Follow this CVE+ Monitor grok2api

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3
A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.1.7 is able to resolve this issue. Patch name: 199b3abecc14907176dae1f1cacf125419caa94d. It is suggested to upgrade the affected component.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
chenyme · grok2api
Related CVEs — chenyme grok2api

In the same product, most dangerous first.

CVE-2026-123748MEDIUMchenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumptionEPSS 0.4%CVE-2026-123788MEDIUMchenyme grok2api STT Billing voice_ws_handler.go behavioral workflowEPSS 0.3%