Read the docs
TI-2023-27481 Aliases CVE-2023-50253

laf logs leak

Priority HIGH 75CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which allows authenticated users to obtain any pod logs under the same namespace through this method, thereby obtaining sensitive information printed in the logs. As of time of publication, no known patched versions exist.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00741 54th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
labringlafup to 1.0.0-beta.13—No fix listedCNA
  • laf Vendorlabring Affected up to 1.0.0-beta.13 Fixed in — No fix listed CNA

CPE configurations NVD · 139

CPEVersionsRoleVendor
cpe:2.3:a:laf:laf:0.1.5:*:*:*:*:*:*:*0.1.5VulnerableLaf
cpe:2.3:a:laf:laf:0.4.0:*:*:*:*:*:*:*0.4.0VulnerableLaf
cpe:2.3:a:laf:laf:0.4.1:*:*:*:*:*:*:*0.4.1VulnerableLaf
cpe:2.3:a:laf:laf:0.4.2:*:*:*:*:*:*:*0.4.2VulnerableLaf
cpe:2.3:a:laf:laf:0.4.3:*:*:*:*:*:*:*0.4.3VulnerableLaf
cpe:2.3:a:laf:laf:0.4.4:*:*:*:*:*:*:*0.4.4VulnerableLaf
cpe:2.3:a:laf:laf:0.4.5:*:*:*:*:*:*:*0.4.5VulnerableLaf
cpe:2.3:a:laf:laf:0.4.6:*:*:*:*:*:*:*0.4.6VulnerableLaf
cpe:2.3:a:laf:laf:0.4.7:*:*:*:*:*:*:*0.4.7VulnerableLaf
cpe:2.3:a:laf:laf:0.4.8:*:*:*:*:*:*:*0.4.8VulnerableLaf
  • cpe:2.3:a:laf:laf:0.1.5:*:*:*:*:*:*:* Versions 0.1.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.5:*:*:*:*:*:*:* Versions 0.4.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.6:*:*:*:*:*:*:* Versions 0.4.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.7:*:*:*:*:*:*:* Versions 0.4.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.8:*:*:*:*:*:*:* Versions 0.4.8 Vulnerable ·Laf
Show 129 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:laf:laf:0.4.9:*:*:*:*:*:*:*0.4.9VulnerableLaf
cpe:2.3:a:laf:laf:0.4.10:*:*:*:*:*:*:*0.4.10VulnerableLaf
cpe:2.3:a:laf:laf:0.4.11:*:*:*:*:*:*:*0.4.11VulnerableLaf
cpe:2.3:a:laf:laf:0.4.12:*:*:*:*:*:*:*0.4.12VulnerableLaf
cpe:2.3:a:laf:laf:0.4.13:*:*:*:*:*:*:*0.4.13VulnerableLaf
cpe:2.3:a:laf:laf:0.4.14:*:*:*:*:*:*:*0.4.14VulnerableLaf
cpe:2.3:a:laf:laf:0.4.15:*:*:*:*:*:*:*0.4.15VulnerableLaf
cpe:2.3:a:laf:laf:0.4.16:*:*:*:*:*:*:*0.4.16VulnerableLaf
cpe:2.3:a:laf:laf:0.4.17:*:*:*:*:*:*:*0.4.17VulnerableLaf
cpe:2.3:a:laf:laf:0.4.18:*:*:*:*:*:*:*0.4.18VulnerableLaf
cpe:2.3:a:laf:laf:0.4.19:*:*:*:*:*:*:*0.4.19VulnerableLaf
cpe:2.3:a:laf:laf:0.4.20:*:*:*:*:*:*:*0.4.20VulnerableLaf
cpe:2.3:a:laf:laf:0.4.21:alpha0:*:*:*:*:*:*0.4.21 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:-:*:*:*:*:*:*0.5.0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha0:*:*:*:*:*:*0.5.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha1:*:*:*:*:*:*0.5.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha2:*:*:*:*:*:*0.5.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha3:*:*:*:*:*:*0.5.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.5.1:-:*:*:*:*:*:*0.5.1VulnerableLaf
cpe:2.3:a:laf:laf:0.5.1:alpha0:*:*:*:*:*:*0.5.1 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.2:-:*:*:*:*:*:*0.5.2VulnerableLaf
cpe:2.3:a:laf:laf:0.5.2:alpha0:*:*:*:*:*:*0.5.2 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.3:*:*:*:*:*:*:*0.5.3VulnerableLaf
cpe:2.3:a:laf:laf:0.5.4:-:*:*:*:*:*:*0.5.4VulnerableLaf
cpe:2.3:a:laf:laf:0.5.4:alpha0:*:*:*:*:*:*0.5.4 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.5:-:*:*:*:*:*:*0.5.5VulnerableLaf
cpe:2.3:a:laf:laf:0.5.5:alpha0:*:*:*:*:*:*0.5.5 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.6:*:*:*:*:*:*:*0.5.6VulnerableLaf
cpe:2.3:a:laf:laf:0.5.7:-:*:*:*:*:*:*0.5.7VulnerableLaf
cpe:2.3:a:laf:laf:0.5.7:alpha0:*:*:*:*:*:*0.5.7 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.8:alpha0:*:*:*:*:*:*0.5.8 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:-:*:*:*:*:*:*0.6.0VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha0:*:*:*:*:*:*0.6.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha1:*:*:*:*:*:*0.6.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha10:*:*:*:*:*:*0.6.0 alpha10VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha2:*:*:*:*:*:*0.6.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha3:*:*:*:*:*:*0.6.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha4:*:*:*:*:*:*0.6.0 alpha4VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha5:*:*:*:*:*:*0.6.0 alpha5VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha6:*:*:*:*:*:*0.6.0 alpha6VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha7:*:*:*:*:*:*0.6.0 alpha7VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha8:*:*:*:*:*:*0.6.0 alpha8VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha9:*:*:*:*:*:*0.6.0 alpha9VulnerableLaf
cpe:2.3:a:laf:laf:0.6.1:*:*:*:*:*:*:*0.6.1VulnerableLaf
cpe:2.3:a:laf:laf:0.6.2:*:*:*:*:*:*:*0.6.2VulnerableLaf
cpe:2.3:a:laf:laf:0.6.3:*:*:*:*:*:*:*0.6.3VulnerableLaf
cpe:2.3:a:laf:laf:0.6.4:*:*:*:*:*:*:*0.6.4VulnerableLaf
cpe:2.3:a:laf:laf:0.6.5:*:*:*:*:*:*:*0.6.5VulnerableLaf
cpe:2.3:a:laf:laf:0.6.6:*:*:*:*:*:*:*0.6.6VulnerableLaf
cpe:2.3:a:laf:laf:0.6.7:*:*:*:*:*:*:*0.6.7VulnerableLaf
cpe:2.3:a:laf:laf:0.6.8:*:*:*:*:*:*:*0.6.8VulnerableLaf
cpe:2.3:a:laf:laf:0.6.9:*:*:*:*:*:*:*0.6.9VulnerableLaf
cpe:2.3:a:laf:laf:0.6.10:*:*:*:*:*:*:*0.6.10VulnerableLaf
cpe:2.3:a:laf:laf:0.6.11:*:*:*:*:*:*:*0.6.11VulnerableLaf
cpe:2.3:a:laf:laf:0.6.12:*:*:*:*:*:*:*0.6.12VulnerableLaf
cpe:2.3:a:laf:laf:0.6.13:*:*:*:*:*:*:*0.6.13VulnerableLaf
cpe:2.3:a:laf:laf:0.6.14:*:*:*:*:*:*:*0.6.14VulnerableLaf
cpe:2.3:a:laf:laf:0.6.15:*:*:*:*:*:*:*0.6.15VulnerableLaf
cpe:2.3:a:laf:laf:0.6.16:*:*:*:*:*:*:*0.6.16VulnerableLaf
cpe:2.3:a:laf:laf:0.6.17:*:*:*:*:*:*:*0.6.17VulnerableLaf
cpe:2.3:a:laf:laf:0.6.18:*:*:*:*:*:*:*0.6.18VulnerableLaf
cpe:2.3:a:laf:laf:0.6.19:*:*:*:*:*:*:*0.6.19VulnerableLaf
cpe:2.3:a:laf:laf:0.6.20:*:*:*:*:*:*:*0.6.20VulnerableLaf
cpe:2.3:a:laf:laf:0.6.21:*:*:*:*:*:*:*0.6.21VulnerableLaf
cpe:2.3:a:laf:laf:0.6.22:*:*:*:*:*:*:*0.6.22VulnerableLaf
cpe:2.3:a:laf:laf:0.6.23:*:*:*:*:*:*:*0.6.23VulnerableLaf
cpe:2.3:a:laf:laf:0.7.0:*:*:*:*:*:*:*0.7.0VulnerableLaf
cpe:2.3:a:laf:laf:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableLaf
cpe:2.3:a:laf:laf:0.7.2:*:*:*:*:*:*:*0.7.2VulnerableLaf
cpe:2.3:a:laf:laf:0.7.3:*:*:*:*:*:*:*0.7.3VulnerableLaf
cpe:2.3:a:laf:laf:0.7.4:*:*:*:*:*:*:*0.7.4VulnerableLaf
cpe:2.3:a:laf:laf:0.7.5:*:*:*:*:*:*:*0.7.5VulnerableLaf
cpe:2.3:a:laf:laf:0.7.6:*:*:*:*:*:*:*0.7.6VulnerableLaf
cpe:2.3:a:laf:laf:0.7.7:*:*:*:*:*:*:*0.7.7VulnerableLaf
cpe:2.3:a:laf:laf:0.7.8:*:*:*:*:*:*:*0.7.8VulnerableLaf
cpe:2.3:a:laf:laf:0.7.9:*:*:*:*:*:*:*0.7.9VulnerableLaf
cpe:2.3:a:laf:laf:0.7.10:*:*:*:*:*:*:*0.7.10VulnerableLaf
cpe:2.3:a:laf:laf:0.7.11:*:*:*:*:*:*:*0.7.11VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:-:*:*:*:*:*:*0.8.0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha0:*:*:*:*:*:*0.8.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha1:*:*:*:*:*:*0.8.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha10:*:*:*:*:*:*0.8.0 alpha10VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha11:*:*:*:*:*:*0.8.0 alpha11VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha2:*:*:*:*:*:*0.8.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha3:*:*:*:*:*:*0.8.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha4:*:*:*:*:*:*0.8.0 alpha4VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha5:*:*:*:*:*:*0.8.0 alpha5VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha6:*:*:*:*:*:*0.8.0 alpha6VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha7:*:*:*:*:*:*0.8.0 alpha7VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha8:*:*:*:*:*:*0.8.0 alpha8VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha9:*:*:*:*:*:*0.8.0 alpha9VulnerableLaf
cpe:2.3:a:laf:laf:0.8.1:*:*:*:*:*:*:*0.8.1VulnerableLaf
cpe:2.3:a:laf:laf:0.8.2:*:*:*:*:*:*:*0.8.2VulnerableLaf
cpe:2.3:a:laf:laf:0.8.3:*:*:*:*:*:*:*0.8.3VulnerableLaf
cpe:2.3:a:laf:laf:0.8.4:*:*:*:*:*:*:*0.8.4VulnerableLaf
cpe:2.3:a:laf:laf:0.8.5:-:*:*:*:*:*:*0.8.5VulnerableLaf
cpe:2.3:a:laf:laf:0.8.5:alpha0:*:*:*:*:*:*0.8.5 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.6:*:*:*:*:*:*:*0.8.6VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:-:*:*:*:*:*:*0.8.7VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha0:*:*:*:*:*:*0.8.7 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha1:*:*:*:*:*:*0.8.7 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha2:*:*:*:*:*:*0.8.7 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha3:*:*:*:*:*:*0.8.7 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.8.8:*:*:*:*:*:*:*0.8.8VulnerableLaf
cpe:2.3:a:laf:laf:0.8.9:*:*:*:*:*:*:*0.8.9VulnerableLaf
cpe:2.3:a:laf:laf:0.8.10:*:*:*:*:*:*:*0.8.10VulnerableLaf
cpe:2.3:a:laf:laf:0.8.11:*:*:*:*:*:*:*0.8.11VulnerableLaf
cpe:2.3:a:laf:laf:0.8.12:*:*:*:*:*:*:*0.8.12VulnerableLaf
cpe:2.3:a:laf:laf:0.8.13:*:*:*:*:*:*:*0.8.13VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha0:*:*:*:*:*:*1.0.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha1:*:*:*:*:*:*1.0.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha2:*:*:*:*:*:*1.0.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha3:*:*:*:*:*:*1.0.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha4:*:*:*:*:*:*1.0.0 alpha4VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha5:*:*:*:*:*:*1.0.0 alpha5VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha6:*:*:*:*:*:*1.0.0 alpha6VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta0:*:*:*:*:*:*1.0.0 beta0VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta1:*:*:*:*:*:*1.0.0 beta1VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta10:*:*:*:*:*:*1.0.0 beta10VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta11:*:*:*:*:*:*1.0.0 beta11VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta12:*:*:*:*:*:*1.0.0 beta12VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta2:*:*:*:*:*:*1.0.0 beta2VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta3:*:*:*:*:*:*1.0.0 beta3VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta4:*:*:*:*:*:*1.0.0 beta4VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta5:*:*:*:*:*:*1.0.0 beta5VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta6:*:*:*:*:*:*1.0.0 beta6VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta7:*:*:*:*:*:*1.0.0 beta7VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta8:*:*:*:*:*:*1.0.0 beta8VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta9:*:*:*:*:*:*1.0.0 beta9VulnerableLaf
  • cpe:2.3:a:laf:laf:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.10:*:*:*:*:*:*:* Versions 0.4.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.11:*:*:*:*:*:*:* Versions 0.4.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.12:*:*:*:*:*:*:* Versions 0.4.12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.13:*:*:*:*:*:*:* Versions 0.4.13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.14:*:*:*:*:*:*:* Versions 0.4.14 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.15:*:*:*:*:*:*:* Versions 0.4.15 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.16:*:*:*:*:*:*:* Versions 0.4.16 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.17:*:*:*:*:*:*:* Versions 0.4.17 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.18:*:*:*:*:*:*:* Versions 0.4.18 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.19:*:*:*:*:*:*:* Versions 0.4.19 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.20:*:*:*:*:*:*:* Versions 0.4.20 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.21:alpha0:*:*:*:*:*:* Versions 0.4.21 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:-:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha0:*:*:*:*:*:* Versions 0.5.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha1:*:*:*:*:*:* Versions 0.5.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha2:*:*:*:*:*:* Versions 0.5.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha3:*:*:*:*:*:* Versions 0.5.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.1:-:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.1:alpha0:*:*:*:*:*:* Versions 0.5.1 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.2:-:*:*:*:*:*:* Versions 0.5.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.2:alpha0:*:*:*:*:*:* Versions 0.5.2 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.3:*:*:*:*:*:*:* Versions 0.5.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.4:-:*:*:*:*:*:* Versions 0.5.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.4:alpha0:*:*:*:*:*:* Versions 0.5.4 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.5:-:*:*:*:*:*:* Versions 0.5.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.5:alpha0:*:*:*:*:*:* Versions 0.5.5 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.6:*:*:*:*:*:*:* Versions 0.5.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.7:-:*:*:*:*:*:* Versions 0.5.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.7:alpha0:*:*:*:*:*:* Versions 0.5.7 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.8:alpha0:*:*:*:*:*:* Versions 0.5.8 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:-:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha0:*:*:*:*:*:* Versions 0.6.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha1:*:*:*:*:*:* Versions 0.6.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha10:*:*:*:*:*:* Versions 0.6.0 alpha10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha2:*:*:*:*:*:* Versions 0.6.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha3:*:*:*:*:*:* Versions 0.6.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha4:*:*:*:*:*:* Versions 0.6.0 alpha4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha5:*:*:*:*:*:* Versions 0.6.0 alpha5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha6:*:*:*:*:*:* Versions 0.6.0 alpha6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha7:*:*:*:*:*:* Versions 0.6.0 alpha7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha8:*:*:*:*:*:* Versions 0.6.0 alpha8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha9:*:*:*:*:*:* Versions 0.6.0 alpha9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.2:*:*:*:*:*:*:* Versions 0.6.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.3:*:*:*:*:*:*:* Versions 0.6.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.4:*:*:*:*:*:*:* Versions 0.6.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.5:*:*:*:*:*:*:* Versions 0.6.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.6:*:*:*:*:*:*:* Versions 0.6.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.7:*:*:*:*:*:*:* Versions 0.6.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.8:*:*:*:*:*:*:* Versions 0.6.8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.9:*:*:*:*:*:*:* Versions 0.6.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.10:*:*:*:*:*:*:* Versions 0.6.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.11:*:*:*:*:*:*:* Versions 0.6.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.12:*:*:*:*:*:*:* Versions 0.6.12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.13:*:*:*:*:*:*:* Versions 0.6.13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.14:*:*:*:*:*:*:* Versions 0.6.14 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.15:*:*:*:*:*:*:* Versions 0.6.15 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.16:*:*:*:*:*:*:* Versions 0.6.16 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.17:*:*:*:*:*:*:* Versions 0.6.17 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.18:*:*:*:*:*:*:* Versions 0.6.18 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.19:*:*:*:*:*:*:* Versions 0.6.19 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.20:*:*:*:*:*:*:* Versions 0.6.20 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.21:*:*:*:*:*:*:* Versions 0.6.21 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.22:*:*:*:*:*:*:* Versions 0.6.22 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.23:*:*:*:*:*:*:* Versions 0.6.23 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.4:*:*:*:*:*:*:* Versions 0.7.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.5:*:*:*:*:*:*:* Versions 0.7.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.6:*:*:*:*:*:*:* Versions 0.7.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.7:*:*:*:*:*:*:* Versions 0.7.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.8:*:*:*:*:*:*:* Versions 0.7.8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.9:*:*:*:*:*:*:* Versions 0.7.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.10:*:*:*:*:*:*:* Versions 0.7.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.11:*:*:*:*:*:*:* Versions 0.7.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:-:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha0:*:*:*:*:*:* Versions 0.8.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha1:*:*:*:*:*:* Versions 0.8.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha10:*:*:*:*:*:* Versions 0.8.0 alpha10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha11:*:*:*:*:*:* Versions 0.8.0 alpha11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha2:*:*:*:*:*:* Versions 0.8.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha3:*:*:*:*:*:* Versions 0.8.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha4:*:*:*:*:*:* Versions 0.8.0 alpha4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha5:*:*:*:*:*:* Versions 0.8.0 alpha5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha6:*:*:*:*:*:* Versions 0.8.0 alpha6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha7:*:*:*:*:*:* Versions 0.8.0 alpha7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha8:*:*:*:*:*:* Versions 0.8.0 alpha8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha9:*:*:*:*:*:* Versions 0.8.0 alpha9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.2:*:*:*:*:*:*:* Versions 0.8.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.3:*:*:*:*:*:*:* Versions 0.8.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.4:*:*:*:*:*:*:* Versions 0.8.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.5:-:*:*:*:*:*:* Versions 0.8.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.5:alpha0:*:*:*:*:*:* Versions 0.8.5 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.6:*:*:*:*:*:*:* Versions 0.8.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:-:*:*:*:*:*:* Versions 0.8.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha0:*:*:*:*:*:* Versions 0.8.7 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha1:*:*:*:*:*:* Versions 0.8.7 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha2:*:*:*:*:*:* Versions 0.8.7 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha3:*:*:*:*:*:* Versions 0.8.7 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.8:*:*:*:*:*:*:* Versions 0.8.8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.9:*:*:*:*:*:*:* Versions 0.8.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.10:*:*:*:*:*:*:* Versions 0.8.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.11:*:*:*:*:*:*:* Versions 0.8.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.12:*:*:*:*:*:*:* Versions 0.8.12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.13:*:*:*:*:*:*:* Versions 0.8.13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha0:*:*:*:*:*:* Versions 1.0.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha1:*:*:*:*:*:* Versions 1.0.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha2:*:*:*:*:*:* Versions 1.0.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha3:*:*:*:*:*:* Versions 1.0.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha4:*:*:*:*:*:* Versions 1.0.0 alpha4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha5:*:*:*:*:*:* Versions 1.0.0 alpha5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha6:*:*:*:*:*:* Versions 1.0.0 alpha6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta0:*:*:*:*:*:* Versions 1.0.0 beta0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta1:*:*:*:*:*:* Versions 1.0.0 beta1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta10:*:*:*:*:*:* Versions 1.0.0 beta10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta11:*:*:*:*:*:* Versions 1.0.0 beta11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta12:*:*:*:*:*:* Versions 1.0.0 beta12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta2:*:*:*:*:*:* Versions 1.0.0 beta2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta3:*:*:*:*:*:* Versions 1.0.0 beta3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta4:*:*:*:*:*:* Versions 1.0.0 beta4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta5:*:*:*:*:*:* Versions 1.0.0 beta5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta6:*:*:*:*:*:* Versions 1.0.0 beta6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta7:*:*:*:*:*:* Versions 1.0.0 beta7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta8:*:*:*:*:*:* Versions 1.0.0 beta8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta9:*:*:*:*:*:* Versions 1.0.0 beta9 Vulnerable ·Laf

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-50253

References

Exploit 1

Advisory 1

  • TI-2026-30610 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox CVSS 3.1CRITICAL 9.8
  • TI-2026-48466 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization CVSS 4.0CRITICAL 9.3
  • TI-2026-44161 FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token') CVSS 4.0HIGH 8.8
  • TI-2026-44148 Incorrect authorization in labring FastGPT CVSS 3.1HIGH 7.7
  • TI-2026-39440 FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard) CVSS 3.1HIGH 7.7
  • TI-2026-30646 FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion CVSS 4.0MEDIUM 6.3
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences