CVE-2026-108858

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858

A flaw was found in lorax. The service writes caller-supplied API Application Programming Interface tokens from request bodies directly into router logs and tracing data. An attacker with access to system logs or telemetry backends can exploit this flaw to view other users' private authentication...

EUVD-2026-97009

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858 Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858 Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858

Predibase LoRAX versions up to and including 0.12.1 are vulnerable to a sensitive information exposure issue. The application improperly records the caller-supplied api_token from POST /generate request bodies into the router logs. This occurs because the GenerateParameters span field is instrume...

CVE-2026-108858: Insertion of Sensitive Information into Log File

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

PT-2026-110177

🚨 CVE-2026-108858 Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users'...

Linux Distros Unpatched Vulnerability : CVE-2026-108858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodi...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

aa-rag (>=0.1.0, <=0.4.1), graphtomation (>=0.0.3, <=0.0.5) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.29)

langchain-core PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.1.0, =0.0.3, =0.3.0, =0.1.1, =0.0.30, =0.0.33 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

lorax bug fix and enhancement update

An update is available for lorax. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

lorax bug fix and enhancement update

An update is available for lorax. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

lorax bug fix and enhancement update

An update is available for lorax. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...

Image Builder security, bug fix, and enhancement update

cockpit-composer 45-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 45-1 - New upstream release 44-1 - New upstream release 43-1 - New upstream release 42-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release...

lorax-templates-Rocky Linux bug fix and enhancement update

An update is available for lorax-templates-rhel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

lorax bug fix and enhancement update

An update is available for lorax. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

lorax-templates-Rocky Linux bug fix and enhancement update

An update is available for lorax-templates-rhel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

lorax bug fix and enhancement update

An update is available for lorax. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

new packages: lorax

An update is available for lorax. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...