TI-2026-79724 CVE-2026-107685 · GHSA-w53j-6pxf-r2vw
Missing TLS certificate checks in req_llm WebSocket sessions
Priority HIGH 74
Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via…