| शीर्षक | PromtEngineer localGPT Latest (commit 4d41c7d) Missing Authentication and Authorization |
|---|
| विवरण | A complete lack of authentication and authorization mechanisms in localGPT allows any unauthenticated user to create, read, modify, and delete all sessions and messages without any credentials. An attacker can access sensitive conversation history containing confidential information such as database credentials, API keys, customer data, and proprietary business information. This vulnerability affects all API endpoints and represents a critical security failure that exposes all data stored in the system. |
|---|
| स्रोत | ⚠️ https://github.com/August829/CVEP/issues/8 |
|---|
| उपयोगकर्ता | Yu_Bao (UID 89348) |
|---|
| सबमिशन | 12/03/2026 03:44 AM (4 महीनों पहले) |
|---|
| संयम | 27/03/2026 02:49 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 353887 [PromtEngineer localGPT तक 4d41c7d1713b16b216d8e062e51a5dd88b20b054 API Endpoint backend/server.py LocalGPTHandler BaseHTTPRequestHandler कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|