CVE-2026-0615

The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...

CVE-2026-0615 CVE-2026-0615

The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...

CVE-2026-0615

The Librarian personal AI assistant software is vulnerable because its web_fetch tool can be used to retrieve the supervisord status page . This allows an attacker to access and retrieve information about running processes within the TheLibrarian backend . The vendor has addressed this vulnerabil...

CVE-2026-0615 CVE-2026-0615

The Librarian supervisord status page can be retrieved by the webfetch tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions...

CVE-2026-0616 CVE-2026-0616

TheLibrarians webfetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions...

CVE-2026-0616

The TheLibrarian AI-powered personal assistant tool contains a vulnerability in its web_fetch tool. This flaw allows an attacker to retrieve content from the Adminer interface , which can subsequently be used to gain unauthorized access and log into the internal TheLibrarian backend system . The ...

CVE-2026-0613

The Librarian contains an internal port scanning vulnerability, facilitated by the webfetch tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has...

CVE-2026-0613 CVE-2026-0613

The Librarian contains an internal port scanning vulnerability, facilitated by the webfetch tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has...

CVE-2026-0613 CVE-2026-0613

The Librarian contains an internal port scanning vulnerability, facilitated by the webfetch tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has...

CVE-2026-0613

The personal AI assistant The Librarian (by The Librarian Company) contains an internal port scanning vulnerability within its web_fetch tool. This flaw allows for SSRF-style behavior , where an attacker can perform GET requests to internal IP addresses and services. Such exploitation enables the...

CVE-2026-0612

The Librarian contains a information leakage vulnerability through the webfetch tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions ...

CVE-2026-0612

The Librarian, an AI-powered personal assistant tool developed by TheLibrarian.io, contains an information leakage vulnerability within its web_fetch tool. An attacker can exploit this flaw to retrieve arbitrary external content , potentially using The Librarian's infrastructure as a proxy to rou...

CVE-2026-0612 CVE-2026-0612

The Librarian contains a information leakage vulnerability through the webfetch tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001666 advisory. The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

PT-2026-3249

Name of the Vulnerable Software and Affected Versions TheLibrarian versions prior to the fixed version Description The supervisord status page within TheLibrarian can be accessed via the web fetch tool, potentially exposing running processes in the backend. This allows for the retrieval of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004347 advisory. The mptctlioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation...

PT-2026-3247

Name of the Vulnerable Software and Affected Versions The Librarian affected versions not specified Description The Librarian software has an information leakage issue stemming from the web fetch tool. This allows an attacker to retrieve arbitrary external content, potentially using The Librarian...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001096 advisory. Race condition in the auditlogsingleexecvearg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001205 advisory. The sndmsndmidiinputread function in sound/isa/msnd/msndmidi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

PT-2026-3248

Name of the Vulnerable Software and Affected Versions TheLibrarian affected versions not specified Description The Librarian software has an internal port scanning issue stemming from the web fetch tool. This tool allows for Server-Side Request Forgery SSRF-style behavior, enabling GET requests t...