CVE-2026-124574mediumCWE-266CWE-285

CVE-2026-124574: fallo de gravedad media en chenyme grok2api

chenyme grok2api Video Job Retry video.go beginSelectionSession improper authorization

Publicada el

Seguir esta CVE+ Monitorear grok2api

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

10Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3
A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.1.7 is able to resolve this issue. Patch name: 199b3abecc14907176dae1f1cacf125419caa94d. It is suggested to upgrade the affected component.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
chenyme · grok2api
CVEs relacionadas — chenyme grok2api

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-123748MEDIUMchenyme grok2api WebSocket Proxy voice_ws_handler.go proxyVoiceWebSocket resource consumptionEPSS 0.4%CVE-2026-123788MEDIUMchenyme grok2api STT Billing voice_ws_handler.go behavioral workflowEPSS 0.3%