Vulnerabilities

TI-2026-03278 CVE-2026-3789 · GHSA-54pp-xgwg-wv5c

Bytedesk SpringAIGiteeRestController SpringAIGiteeRestService.java getModels server-side request forgery

MEDIUM 57

A vulnerability was detected in Bytedesk up to 1.3.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0048 Published 2026-03-08 Fixed in 1.4.5.4 CWE-918

TI-2026-03277 CVE-2026-3788 · GHSA-2x8h-3gx5-578j

MEDIUM 57

A security vulnerability has been detected in Bytedesk up to 1.3.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00478 Published 2026-03-08 Fixed in 1.4.5.4 CWE-918

TI-2026-03239 CVE-2026-3749 · GHSA-995q-rmr5-rrmg

MEDIUM 57

A weakness has been identified in Bytedesk up to 1.3.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0048 Published 2026-03-08 Fixed in 1.4.5.1 CWE-284

TI-2026-03238 CVE-2026-3748 · GHSA-x2c8-qgvg-23wq

MEDIUM 57

A security flaw has been discovered in Bytedesk up to 1.3.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00548 Published 2026-03-08 Fixed in 1.4.5.1 CWE-284