Read the docs

cheaper-inference

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

cheaper-inference records in CISA KEV

No cheaper-inference vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-80546 CVE-2026-116634 · GHSA-fqp9-jcg9-vhfv

Missing authentication in OmniRoute lets attackers obtain API keys

Priority LOW 36

OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00499 Published 2026-10-26 Fixed in 3.8.52 CWE-306
TI-2026-82357 CVE-2026-118984 · GHSA-3625-cmv6-g9c2

Unverified password change in OmniRoute lets token holders take over login

Priority LOW 31

OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or admin-scoped API keys or oma_ access tokens to change the management password without the current passw…

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00381 Published 2026-10-29 Fixed in 3.8.52 CWE-620
Open these records in search →