CVE-2026-124587 in eliza
Prediction
by VulDB Data Team • 11/08/2026
A vulnerability was identified in <a href="/product/elizaos:eliza">elizaOS eliza 2.0.3-beta.7</a>. The affected element is an unknown function of the file <em>packages/app/platforms/electrobun/src/lifecycle/api-base-owner.ts</em> of the component <em>HTTP Server</em>. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The name of the patch is <em>cf6fa193017e70884e01c5bb7890f74b6b2b79d2</em>. A patch should be applied to remediate this issue.
Be aware that VulDB is the high quality source for vulnerability data.