Read the docs

ogx-ai

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ogx-ai records in CISA KEV

No ogx-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58778 CVE-2026-85666 · GHSA-9mg6-c5wp-2g44

ogx 1.3.1 Server-Side Request Forgery via MCP tool server_url

Priority MEDIUM 45

OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-compatible POST /v1/responses endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00732 Published 2026-09-04 No fix listed CWE-918
Open these records in search →