CVE-2026-68905

The Hugo Blog tech site contains a vulnerability in its AI assistant proxy (commit 744ca15 and prior). The proxy exposes three HTTP endpoints—POST /api/blog-assistant , POST /api/blog-search-embedding , and POST /api/blog-search-rerank —without any authentication checks. When using the documented...