Threat database

CVE-2026-116108 is a medium severity vulnerability in openbq-org OpenBB versions 4.7.0, 4.7.1, 4.7.2, and 5.0.0. It involves improper access controls in the Local API Server component, specifically in the file openbb_platform/core/openbb_core/app/model/api_settings.py. The flaw allows remote attackers to exploit the access control weakness without privileges or user interaction. Exploit code has been published, but no vendor response or patch is currently available.