PT-2026-25114
تاريخ النشر
2026-03-02
·
تاريخ التحديث
2026-03-02
الوصف من
CVSS 4.0
6.9
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Summary
Unauthorized senders could trigger two command paths without sender authorization checks:
- stop-like natural-language abort triggers
/modelscommand output
Impact
An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated.
Fix
Sender authorization is now enforced for stop-like abort triggers and
/models listings.Affected and Patched Versions
- Affected:
<= 2026.2.26 - Patched:
2026.3.1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾