1 matches found
CVE-2026-30886: Authorization Bypass Through User-Controlled Key
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.11.4-alpha.2, an Insecure Direct Object Reference IDOR vulnerability in the video proxy endpoint GET /v1/videos/:taskid/content allows any authenticated user to access video...
6.5CVSS5.8AI score0.00365EPSS
SaveExploits1References1
20