Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify… (CVE-2026-107685)

The vulnerability (CVE-2026-107685) arises because the req_llm WebSocket streaming client starts WebSockex without TLS options, causing it to default to insecure mode (verify: :verify_none). Additionally, the client drops any caller-supplied certificate authorities or SSL options, preventing applications from enabling certificate verification. This allows an on-path attacker to intercept and modify WebSocket sessions, including stealing or altering authorization bearer tokens used in OpenAI API calls. The issue affects req_llm versions from 1.9.0 before 1.29.0. Other HTTP streaming paths using Finch and Mint verify certificates properly and are not vulnerable.

An attacker positioned on the network path can intercept and manipulate WebSocket communications between the client and OpenAI services. This includes reading and modifying authorization bearer tokens, potentially leading to unauthorized access or session hijacking. The vulnerability compromises the confidentiality and integrity of the affected WebSocket sessions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using the vulnerable WebSocket streaming client or restrict its use to trusted networks where on-path attacks are not possible. Monitor vendor channels for updates and apply official patches once released.