Veille CVE
Recherche « Predibase LoRAX »
1 CVE
Critique 0
Élevée 0
Moyenne 1
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Predibase LoRAX » ✕
-
CVE-2026-108858 5.5 Moyenne
Predibase LoRAX
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded through the instrumented GenerateParameters span field.