Threats tagged 'ghsa-4f34-q9vf-fwfg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-126767OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the Medium5.32026-11-11GCVE DatabaseCVE-2026-126767 OpsTree REMS versions through 1.0.0 have a prompt injection vulnerability that allows authenticated users to disclose hidden system prompts by submitting crafted input to the chat API endpoint. This flaw enables attackers to bypass assistant rules and reveal internal orchestration instructions, potentially facilitating further prompt injection attacks. Report on CVE-2026-126767 Vulnerability #ghsa-4f34-q9vf-fwfg	GCVE Database	2026-11-11

Page 1 of 1