CVE-2026-0613
HighSummary
The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions.
Risk Assessment
An attacker could exploit this vulnerability to scan the internal cloud infrastructure, potentially leading to discovery of sensitive services and further attacks.
Recommendation
It is recommended to immediately update The Librarian to the latest version where the vendor has fixed the vulnerability.
Other vulnerabilities in The Librarian
Original NVD description (English source)
The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions.