Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/23 7:18 p.m.33 views

CVE-2026-30886 New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.11.4-alpha.2, an Insecure Direct Object Reference IDOR vulnerability in the video proxy endpoint GET /v1/videos/:taskid/content allows any authenticated user to access video...

6.5CVSS0.00274EPSS
SaveExploits1References2
Rows per page
Query Builder