CVE Catalog
CVE-2026-50755
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.43%
35th percentile - higher than 35% of all known CVEs
Summary
An issue in DayuanJiang next-ai-draw-io version 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header.
Risk Assessment
Risk of sensitive information leakage, such as IP addresses or configuration data, which may facilitate further attacks.
Recommendation
Update next-ai-draw-io to the latest version and configure validation of the X-Forwarded-For header.
Original NVD description (English source)
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value