What’s Vulnerable › Vulnerabilities

CVE-2026-0612: CVE-2026-0612

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-16 · updated 2026-06-17

Description

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.

Affected products

• TheLibrarian.io: all versions

References

• http://mindgard.ai/blog/thelibrarian-ios-ai-security-
• https://thelibrarian.io/

Get alerted when CVE-2026-0612 or the next vulnerability affects your stack