CVE-2026-89213

Name of the Vulnerable Software and Affected Versions Llavero.io versions prior to 0.1.5

Description An issue exists where the software fails to properly sanitize and escape the cill login parameter before incorporating it into a SQL statement. This allows unauthenticated attackers to execute SQL injection attacks, which is a technique used to manipulate database queries, to read sensitive data from the database.

Recommendations Update Llavero.io to a version newer than 0.1.4. Avoid using the cill login parameter until the update is applied.