CVE-2026-107685: CWE-295 Improper Certificate Validation in agentjido req_llm

The vulnerability arises because the req_llm WebSocket streaming client (specifically in ReqLLM.Streaming.WebSocketSession.Client.start/3) starts WebSockex without TLS verification options, defaulting to insecure mode (verify: :verify_none). Additionally, the allowlist option drops any caller-supplied certificate authorities or SSL options, preventing applications from enabling proper certificate verification. As a result, an attacker positioned on the network path can read and modify WebSocket sessions, including authorization bearer tokens sent in the headers. This affects req_llm versions >=1.9.0 and <1.29.0. Other req_llm HTTP streaming paths that use Finch or Mint verify certificates correctly and are not vulnerable.

An attacker with network access can perform man-in-the-middle attacks on OpenAI WebSocket sessions initiated by vulnerable req_llm clients, potentially reading and modifying sensitive data such as authorization bearer tokens. This compromises confidentiality and integrity of the WebSocket communication. The vulnerability does not affect other HTTP streaming methods in req_llm that properly verify TLS certificates.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using vulnerable req_llm versions for WebSocket streaming or restrict network access to trusted environments to mitigate on-path interception risks.