Predibase

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Predibase records in CISA KEV

No Predibase vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70748 CVE-2026-108858 · GHSA-mqw3-26gg-6g3w

Predibase LoRAX writes caller API tokens into router logs

MEDIUM 63

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00173 Published 2026-10-11 No fix listed CWE-532

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0