CVE-2026-0612
HighSummary
The Librarian contains an information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.
Risk Assessment
An attacker could exploit this vulnerability to route traffic through The Librarian infrastructure, potentially leading to attack masking and data integrity issues.
Recommendation
It is recommended to update The Librarian to the latest version where the vendor has fixed the vulnerability.
Other vulnerabilities in The Librarian
Original NVD description (English source)
The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.