Tencent AI-Infra-Guard 4.0 contains an information disclosure vulnerability in an unspecified function within the Task Detail Endpoint (common/websocket/task_manager.go). This flaw allows an unauthenticated remote attacker to perform manipulations that result in partial information leakage. The vulnerability has been publicly disclosed, but no official remediation or patch has been announced by Tencent. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of information from the affected Tencent AI-Infra-Guard 4.0 system. The impact is limited to information disclosure with low confidentiality impact as per the CVSS vector. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, organizations using Tencent AI-Infra-Guard 4.0 should monitor official channels for updates. Until a patch is available, consider restricting access to the affected Task Detail Endpoint or implementing network-level controls to limit exposure.