Threats affecting pkg:github/aip-pub/ACPs-community

CVE-2026-127279 is a vulnerability in AIP-PUB ACPs-community versions 2.0, 2.1, and 2.2.0 affecting the Discovery Server component. It involves missing authentication in a function within discovery-server/app/main.py, allowing remote attackers to exploit the system without proper authentication. The vulnerability has a medium severity with a CVSS score of 6.9. Public exploit code is available, but no confirmed exploitation in the wild has been reported. No patch or official fix has been provided yet.