CVE-2026-0612

CVSS 7.5 HIGHEPSS 0.3%

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

TheLibrarian · TheLibrarian.io

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://mindgard.ai/blog/thelibrarian-ios-ai-security-https://thelibrarian.io/