Tencent AI-Infra-Guard 4.0 contains an information disclosure vulnerability in an unspecified function of the Task Detail Endpoint component (common/websocket/task_manager.go). This flaw allows remote attackers to obtain sensitive information without authentication or user interaction. The vulnerability has been publicly disclosed, but no official patch or remediation has been announced by Tencent. The CVSS 4.0 vector indicates low complexity, no privileges required, no user interaction, and partial impact on confidentiality only.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from the affected Tencent AI-Infra-Guard 4.0 system. There is no indication of impact on integrity or availability. The vulnerability can be exploited remotely without authentication, increasing the risk of exposure. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, organizations using Tencent AI-Infra-Guard 4.0 should monitor official channels for updates. In the meantime, consider restricting network access to the affected component and applying compensating controls to limit exposure.