Live › vulnerability › CVE-2026-115718
Go to dashboardFrappe Builder's improve_prompt endpoint does not check permissions, so any authenticated non-Guest session can call it. An attacker can use the site owner's stored OpenRouter API key to make paid LLM calls.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 12:29 UTC. All times on this page are UTC.
Sites running Frappe Builder from 1.33.0 up to but not including 1.36.0 that have an OpenRouter API key configured and allow any logged-in user to reach the builder. Sites without a stored OpenRouter key or with no non-Guest accounts are less exposed. unknown whether other key providers are reachable through the same endpoint.
No product ranges from the sources yet.
bench version or the app list in the Frappe site, and see whether it is between 1.33.0 and 1.36.0.1.36.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy.
This page as .md · .json · in your agent: get_signal("CVE-2026-115718")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.