Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/23 7:18 p.m.10 views

CVE-2026-30886 New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.11.4-alpha.2, an Insecure Direct Object Reference IDOR vulnerability in the video proxy endpoint GET /v1/videos/:taskid/content allows any authenticated user to access video...

6.5CVSS6.4AI score
SaveExploits0References4
Rows per page
Query Builder