Threats tagged 'ghsa-c344-c8vm-8rxv'

1 threat

Threats tagged 'ghsa-c344-c8vm-8rxv'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-108581Octop · Missing Authorization High7.1EPSS 0.2%2026-10-10CVE Database V5CVE-2026-108581 TencentCloud Octop versions up to 1.0.2b6 have a missing authorization vulnerability that permits authenticated low-privileged users to access stored provider API keys. The flaw allows these users to retrieve plaintext LLM and voice provider API keys by querying specific API endpoints that only validate JWT tokens without proper authorization checks. EPSS 0.2%Vulnerability TencentCloud #ghsa-c344-c8vm-8rxv	CVE Database V5	2026-10-10

Showing 1–1 of 1 result