LibreTranslate

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

LibreTranslate records in CISA KEV

No LibreTranslate vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-62542 CVE-2026-92803 · GHSA-9p4g-9hh7-7mj3

LibreTranslate through 1.9.6 Missing Access Check on the download_file Route

HIGH 70

LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00525 Published 2026-09-16 No fix listed CWE-862

TI-2026-41708 CVE-2026-57942 · GHSA-4rjg-9qq9-25m8

LibreTranslate - IP Spoofing via X-Forwarded-For Header

HIGH 70

LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by injecting arbitrary…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00234 Published 2026-06-29 Fixed CWE-348

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0