CVE-2026-25591 New API has an SQL LIKE Wildcard Injection DoS via Token Search

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the /api/token/search endpoint allows authenticated users to cause denial of service through resource exhaustion by...

CVE-2026-25591

creationtimestamp| type| source ---|---|--- 2026-02-22 15:59:14+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-w6x6-9fp7-fqm4 2026-02-24 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mflsjc6zzn2u 2026-02-24...