7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.
Basic Information
ID
CVE-2026-0612
Source
certcc
Published
Jan 16, 2026 at 12:44
Modified
Jan 16, 2026 at 21:42
Affected Product
Vendor
TheLibrarian
Product
TheLibrarian.io
Affected Versions
TheLibrarian TheLibrarian.io 0