7.3
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions.
Basic Information
ID
CVE-2026-0615
Source
certcc
Published
Jan 16, 2026 at 12:47
Modified
Jan 16, 2026 at 14:38
Affected Product
Vendor
TheLibrarian
Product
TheLibrarian.io
Affected Versions
TheLibrarian TheLibrarian.io 0