Vendors / onyx-dot-app Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now onyx-dot-app records in CISA KEV No onyx-dot-app vulnerabilities are listed in CISA KEV.
Priority MEDIUM 64
Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00511 · Published 2026-09-04 · No fix listed CWE-522
Priority MEDIUM 64
Onyx is an open-source AI platform.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00516 · Published 2026-08-17 · Fixed in 4.3.0 CWE-639
Priority MEDIUM 43
Onyx is an open-source AI platform.
CVSS 3.1 CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00488 · Published 2026-08-17 · Fixed in 3.1.10, 3.2.14 +1 CWE-200
Priority LOW 23
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00199 · Published 2026-10-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 2 0 0
