Vulnerabilities

TI-2026-32383 CVE-2026-44443

Lumiverse: Sign-up nonce race condition allows unauthorized account registration

MEDIUM 55

Lumiverse is a full-featured AI chat application.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00118 Published 2026-05-26 Fixed in 0.9.7 CWE-362

TI-2026-32384 CVE-2026-44444

HIGH 80

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0037 Published 2026-05-26 Fixed in 0.9.7 CWE-78

TI-2026-32389 CVE-2026-44449

HIGH 74

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00451 Published 2026-05-26 Fixed in 0.9.7 CWE-88

TI-2026-32391 CVE-2026-44451

HIGH 75

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.0023 Published 2026-05-26 Fixed in 0.9.7 CWE-693

TI-2026-32390 CVE-2026-44450

MEDIUM 43

Lumiverse is a full-featured AI chat application.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00377 Published 2026-05-26 Fixed in 0.9.7 CWE-88