Live › vulnerability › CVE-2026-112297
Go to dashboardanx-calibre-manager up to version 1.13.12 passes a user-supplied base_url to its LLM client in LLMClient.chat, so the server makes requests to any address the attacker names. An attacker can use the server to reach internal services or other hosts it can see, and a public exploit has been published.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Instances of anx-calibre-manager up to 1.13.12 that expose the LLM Configuration endpoint, where a remote client can set base_url. Deployments that never reach this endpoint from outside, or that restrict outbound traffic, have lower exposure. The sources do not say whether authentication is required.
No product ranges from the sources yet.
1.13.12 or earlier.1.13.12 if a fixed release exists; the sources do not name one.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component LLM Configuration Handler. This manipulation of the argument base_url causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-112297")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.