TI-2026-75454 CVE-2026-111668 · GHSA-xq66-q5m4-496q
AIHelms Missing Authorization in Efficiency Analytics API
Priority MEDIUM 57
AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks.