CVE-2026-115718

Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve prompt API to leverage the site owner's stored OpenRouter API key via resolve api key, consuming paid LLM credits and effectively turning the site into a free LLM proxy.