CVE-2026-5585
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
In Tencent AI-Infra-Guard 4.0, there is a vulnerability in an unknown function of common/websocket/task_manager.go in the Task Detail Endpoint component. Manipulation leads to information disclosure. The attack can be remote. The exploit is public, and the vendor has not responded.
Risk Assessment
A remote attacker can access sensitive data processed by the AI-Infra-Guard system, such as task details or configuration.
Recommendation
Restrict access to the Task Detail endpoint or apply additional authentication. Monitor for vendor updates.
Original NVD description (English source)
A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.