CVE-2026-0613

Katalog CVE

CVSS 7.5 · High EPSS 0,40%

Kerentanan Server-Side Request Forgery (SSRF) pada thelibrarian the librarian. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions.

Rincian

Terbit di NVD

16 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure advisory pihak ketiga
• https://thelibrarian.io/ product