{"id":"CVE-2026-116108","kind":"vulnerability","aliases":["CVE-2026-116108"],"related":[],"title":"OpenBB: local API server has improper access controls, remotely exploitable","description":"A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/model/api_settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"OpenBB's Local API Server (api_settings.py) has an access control flaw (CWE-284) reported by VulDB. Impact is confidentiality only, and it needs user interaction. VulDB lists a proof of concept, but I could not find a public link. The vendor has not responded and there is no fix.","severity":"medium","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"openbb","fixed":[],"affected":"4.7.0 - 4.7.2, 5.0.0","ecosystem":"pypi"}],"ecosystems":[],"tags":["ai-tooling","fastapi","openbb","python","self-hosted"],"not_affected_if":["api-server-not-running","loopback-only-bind"],"how_to_check":"- Run `pip show openbb openbb-core`. VulDB lists 4.7.0, 4.7.1, 4.7.2 and 5.0 as affected.\n- Check whether `openbb-api` or `uvicorn openbb_core.api.rest_api:app` is running. Docs say openbb-api binds 127.0.0.1:6900 and uvicorn binds 127.0.0.1:8000 by default.\n- Look for `--host 0.0.0.0` or a container deployment, which makes the server reachable from other machines.\n- Check `~/.openbb_platform/system_settings.json` for api_settings.cors.allow_origins. The documented example uses `*`.","fix":"No fixed version known. The vendor did not respond to the disclosure. Until one ships, keep the server on loopback, enable OPENBB_API_AUTH, restrict CORS origins, or stop it when not in use.","status":"open","published_at":"2026-10-26T02:17:06+00:00","first_seen_at":"2026-10-26T02:39:11+00:00","triaged_at":"2026-10-26T02:39:36+00:00","updated_at":"2026-10-26T02:40:44+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-10-26T02:39:36Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"OpenBB: local API server has improper access controls, remotely exploitable","impact":"medium","summary":"OpenBB's local API server, in the api_settings.py component, has an access control flaw that lets a remote party reach functions they should not. The exploit has been published, and the vendor did not respond to the disclosure.","category":"ai-tooling","nicknames":[],"who_cares":["openbb","python","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown access to local API functions from a remote host","analyst_note":"Find the vendor or advisory fix version and the default bind address of the OpenBB Local API Server; the NVD entry alone does not say what the access control bypass exposes.","how_to_check":"- Check the installed OpenBB version with `pip show openbb` or the `openbb_core` package version; versions up to `4.7.2` and `5.0.0` are listed as affected.\n- Check whether the Local API Server is running and bound to a non-loopback address (unknown from sources which port or bind setting is exposed by default).","needs_analyst":true,"not_affected_if":["api-server-not-running"],"who_is_affected":"Teams running OpenBB up to 4.7.2 or 5.0.0 with the Local API Server started, especially if it is reachable from other machines. The sources do not say which default settings expose the server, and do not name a fixed version. Installations that never start the local API server are likely not exposed.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000607,"input_tokens":3354,"output_tokens":543,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Find the vendor or advisory fix version and the default bind address of the OpenBB Local API Server; the NVD entry alone does not say what the access control bypass exposes.","search":"'-116108':13A,16A '-2026':12A,15A '-284':39B '/5.0.0':89C '4.7.2':88C 'access':7A,35B,110C 'affect':91C 'ai':19B 'ai-tool':18B 'api':3A,30B,104C 'api_settings.py':32B 'attack':116C 'caus':108C 'compon':102C 'concept':57B 'confidenti':45B 'contact':131C 'control':8A,36B,111C 'could':60B 'cve':11A,14A 'cwe':38B 'disclosur':135C 'earli':132C 'exploit':10A,113C,120C 'fastapi':21B 'file':97C 'find':62B 'fix':75B 'flaw':37B,77C 'found':80C 'host':26B 'impact':43B 'improp':6A,109C 'interact':51B 'link':65B 'list':53B 'local':2A,29B,103C 'manipul':107C 'may':125C 'need':49B 'openbb':1A,17A,22B,27B,85C,98C 'openbq':83C 'openbq-org':82C 'org':84C 'part':94C 'platform/core/openbb_core/app/model/api_settings.py':99C 'possibl':118C 'proof':55B 'public':64B 'publish':123C 'python':23B 'remot':9A,112C 'report':40B 'respond':70B,139C 'self':25B 'self-host':24B 'server':4A,31B,105C 'tool':20B 'unknown':93C 'use':127C 'user':50B 'vendor':67B,129C 'vuldb':42B,52B 'way':142C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenBB up to 4.7.2 or 5.0.0 with the Local API Server started, especially if it is reachable from other machines. The sources do not say which default settings expose the server, and do not name a fixed version. Installations that never start the local API server are likely not exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T02:17:06+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116108","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116108","severity":null,"published_at":"2026-10-26T02:17:06+00:00","modified_at":"2026-10-26T02:17:06+00:00","first_seen_at":"2026-10-26T02:39:11+00:00","fetched_at":"2026-10-26T02:39:11+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116108:825","url":null,"severity":null,"published_at":"2026-10-26T02:40:44+00:00","modified_at":"2026-10-26T02:40:44+00:00","first_seen_at":"2026-10-26T02:40:44+00:00","fetched_at":"2026-10-26T02:40:44+00:00","note":"VulDB (VDB-426176) is the only advisory; vendor silent, no fix version, no public PoC link, details of the bypass not published. OpenBB docs: openbb-api binds 127.0.0.1:6900, uvicorn default 127.0.0.1:8000, no auth by default, api_settings CORS defaults to '*' (docs only; not confirmed as the flaw). VulDB says user interaction needed, confidentiality impact only."}],"documents":[{"id":3688,"url":"https://vuldb.com/vuln/426176","title":"VDB-426176 OpenBB Local API Server api_settings.py access control","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":3689,"url":"https://docs.openbb.co/odp/python/quickstart/rest_api","title":"OpenBB REST API Quick Start (binds 127.0.0.1:6900 / uvicorn 127.0.0.1:8000)","kind":"vendor","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":3690,"url":"https://docs.openbb.co/odp/python/settings/system_settings","title":"OpenBB System Settings: api_settings default CORS allow_origins *","kind":"vendor","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}