10 matches found
lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
SummaryThe LightRAG API server passes raw Python exception messages directly into HTTPerror responses across 30+ error handlers in every router. When combined withthe default unauthenticated configuration see companion report on CWE-306, anynetwork-reachable client can trigger exceptions whose ra...
5.3CVSS5.7AI score0.00386EPSS
SaveExploits0References9Affected Software1
20