CVE-2026-121936

The easyVoice software (versions prior to 0.0.23 ) is vulnerable to a Server-Side Request Forgery (SSRF) . An unauthenticated attacker can force the server to send POST requests by supplying a custom openaiBaseUrl while useLLM is enabled. This vulnerability can be exploited via the /api/v1/tts en...