QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-0612

Back to search

CVE-2026-0612

Published: Jan 16, 2026

Modified: Jan 16, 2026

PUBLISHED

Description

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.

VendorProductVersions

TheLibrarian

TheLibrarian.io

affected
0 - <= 1.0

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now