CVE-2026-124574 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
grok2api is a gateway that lets applications call Grok models through an API. A flaw in its video job retry handler lets a remote attacker get past an authorization check, and the public exploit may be used.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run grok2api as a self-hosted gateway in front of Grok models, reachable over the network, are exposed. Deployments on the fixed version 3.1.7 or later are not affected by this flaw. The sources do not say whether an account is needed or whether any non-default setting is required.
Not affected if version-3.1.7-or-later
Who cares grok, grok2api, llm-gateway, self-hosted
3.1.6 are affected.backend/internal/application/gateway/video.go in your deployed source and confirm it matches the fixed release.3.1.7 (fix patch 199b3abecc14907176dae1f1cacf125419caa94d).A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.1.7 is able to resolve this issue. Patch name: 199b3abecc14907176dae1f1cacf125419caa94d. It is suggested to upgrade the affected component.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.