CVE Intelligence

Vulnerabilidades de Theopenco

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Theopenco: 1 registro(s), com severidade, exploração e correções.

LLMGateway 1

Somente exploradas (KEV) →

CVE-2026-108719 Média · 5.0 CWE-918 11/10/2026
LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url
LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the assertSafeWebhookTarget check, reaching internal services from the worker's network.