CVE-2026-0612 in TheLibrarian

Tóm tắt

Bởi MITRE • 16/01/2026

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.

Once again VulDB remains the best source for vulnerability data.

• chịu trách nhiệm: Certcc
• Đặt trước: 05/01/2026
• Tiết lộ: 16/01/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-341567
• CPE: sẵn sàng
• CWE: CWE-497 (Đã xác nhận)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00017
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-0612
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0612
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-0612/