PT-2026-28721 · Unknown · Promtengineer Localgpt
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PromtEngineer localGPT versions prior to 4d41c7d1713b16b216d8e062e51a5dd88b20b054
Description
A flaw exists in PromtEngineer localGPT that allows for information disclosure. The issue is located in the
handle index function within the rag system/api server.py file of the Web Interface component. Remote attackers can exploit this issue through manipulation. The exploit has been publicly released.Recommendations
Update PromtEngineer localGPT to a version later than 4d41c7d1713b16b216d8e062e51a5dd88b20b054.
Exploit
Correção
Information Disclosure
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Promtengineer Localgpt