CVE-2026-0612

7.5 highEPSS 0.4%

High (7.5) in thelibrarian the librarian. EPSS 0.4% chance of exploitation in the next 30 days.

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
Published: 2026-01-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

thelibrarian:the_librarian

References

http://mindgard.ai/blog/thelibrarian-ios-ai-security-
https://thelibrarian.io/

Check your stack JSON