Read the docs

LingGuoAI

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

LingGuoAI records in CISA KEV

No LingGuoAI vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75509 CVE-2026-111723 · GHSA-9gfr-r435-56mx

Missing authorization in LingGuo-Drama lets any user manage accounts

Priority HIGH 73

LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0036 Published 2026-10-16 No fix listed CWE-862
TI-2026-75508 CVE-2026-111722 · GHSA-4cg4-g3g8-qxpg

IDOR in LingGuo-Drama lets users access other users' projects

Priority HIGH 72

LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00303 Published 2026-10-16 No fix listed CWE-639
Open these records in search →