{"id":"CVE-2026-124574","kind":"vulnerability","aliases":["CVE-2026-124574"],"related":[],"title":"grok2api: video job retry flaw allows improper authorization remotely","description":"A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.1.7 is able to resolve this issue. Patch name: 199b3abecc14907176dae1f1cacf125419caa94d. It is suggested to upgrade the affected component.","summary":"grok2api is a gateway that lets applications call Grok models through an API. A flaw in its video job retry handler lets a remote attacker get past an authorization check, and the public exploit may be used.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","grok","grok2api","llm-gateway","self-hosted"],"not_affected_if":["version-3.1.7-or-later"],"how_to_check":"- Check the deployed grok2api version; versions up to `3.1.6` are affected.\n- Look for the file `backend/internal/application/gateway/video.go` in your deployed source and confirm it matches the fixed release.","fix":"- grok2api: upgrade to `3.1.7` (fix patch `199b3abecc14907176dae1f1cacf125419caa94d`).","status":"open","published_at":"2026-11-09T07:17:32+00:00","first_seen_at":"2026-11-09T07:25:05+00:00","triaged_at":"2026-11-09T07:25:29+00:00","updated_at":"2026-11-09T07:25:29+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-11-09T07:25:29Z","model":"claude-haiku-5-5","output":{"fix":"- grok2api: upgrade to `3.1.7` (fix patch `199b3abecc14907176dae1f1cacf125419caa94d`).","reach":"internet","title":"grok2api: video job retry flaw allows improper authorization remotely","impact":"medium","summary":"grok2api is a gateway that lets applications call Grok models through an API. A flaw in its video job retry handler lets a remote attacker get past an authorization check, and the public exploit may be used.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["grok2api","self-hosted","llm-gateway","grok"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"Remote requests bypass authorization checks on video job retries","analyst_note":"","how_to_check":"- Check the deployed grok2api version; versions up to `3.1.6` are affected.\n- Look for the file `backend/internal/application/gateway/video.go` in your deployed source and confirm it matches the fixed release.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["version-3.1.7-or-later"],"who_is_affected":"Teams that run grok2api as a self-hosted gateway in front of Grok models, reachable over the network, are exposed. Deployments on the fixed version `3.1.7` or later are not affected by this flaw. The sources do not say whether an account is needed or whether any non-default setting is required.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.001183,"input_tokens":4660,"output_tokens":1434,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-124574':12A,15A '-2026':11A,14A '199b3abecc14907176dae1f1cacf125419caa94d':126C '3.1.6':73C '3.1.7':117C 'abl':119C 'affect':76C,133C 'ai':17B 'ai-tool':16B 'allow':6A 'api':39B 'applic':33B 'attack':51B,102C 'author':8A,55B,95C 'backend/internal/application/gateway/video.go':83C 'beginselectionsess':79C 'call':34B 'caus':93C 'check':56B 'chenym':69C 'compon':86C,134C 'cve':10A,13A 'determin':67C 'disclos':109C 'exploit':60B,105C 'file':82C 'flaw':5A,41B 'function':78C 'gateway':23B,30B 'get':52B 'grok':19B,35B 'grok2api':1A,20B,27B,70C 'handler':47B,90C 'host':26B 'improp':7A,94C 'initi':100C 'issu':123C 'job':3A,45B,88C 'let':32B,48B 'llm':22B 'llm-gateway':21B 'manipul':92C 'may':61B,111C 'model':36B 'name':125C 'past':53B 'patch':124C 'possibl':98C 'public':59B,108C 'remot':9A,50B,103C 'resolv':121C 'retri':4A,46B,89C 'self':25B 'self-host':24B 'suggest':129C 'tool':18B 'upgrad':114C,131C 'use':63B 'util':113C 'version':116C 'video':2A,44B,87C 'vulner':65C,75C","nicknames":[],"mitigations":[],"who_affected":"Teams that run grok2api as a self-hosted gateway in front of Grok models, reachable over the network, are exposed. Deployments on the fixed version `3.1.7` or later are not affected by this flaw. The sources do not say whether an account is needed or whether any non-default setting is required.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aitooling","grok","grok2api","llmgateway","medium","selfhosted"],"campaign_type":null,"search_a":"'-124574':12A,15A '-2026':11A,14A 'allow':6A 'author':8A 'cve':10A,13A 'flaw':5A 'grok2api':1A 'improp':7A 'job':3A 'remot':9A 'retri':4A 'video':2A","search_b":"'ai':17B 'ai-tool':16B 'api':39B 'applic':33B 'attack':51B 'author':55B 'call':34B 'check':56B 'exploit':60B 'flaw':41B 'gateway':23B,30B 'get':52B 'grok':19B,35B 'grok2api':20B,27B 'handler':47B 'host':26B 'job':45B 'let':32B,48B 'llm':22B 'llm-gateway':21B 'may':61B 'model':36B 'past':53B 'public':59B 'remot':50B 'retri':46B 'self':25B 'self-host':24B 'tool':18B 'use':63B 'video':44B","search_c":"'199b3abecc14907176dae1f1cacf125419caa94d':126C '3.1.6':73C '3.1.7':117C 'abl':119C 'affect':76C,133C 'attack':102C 'author':95C 'backend/internal/application/gateway/video.go':83C 'beginselectionsess':79C 'caus':93C 'chenym':69C 'compon':86C,134C 'determin':67C 'disclos':109C 'exploit':105C 'file':82C 'function':78C 'grok2api':70C 'handler':90C 'improp':94C 'initi':100C 'issu':123C 'job':88C 'manipul':92C 'may':111C 'name':125C 'patch':124C 'possibl':98C 'public':108C 'remot':103C 'resolv':121C 'retri':89C 'suggest':129C 'upgrad':114C,131C 'util':113C 'version':116C 'video':87C 'vulner':65C,75C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T07:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124574","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124574","severity":null,"published_at":"2026-11-09T07:17:32+00:00","modified_at":"2026-11-09T07:17:32+00:00","first_seen_at":"2026-11-09T07:25:05+00:00","fetched_at":"2026-11-09T07:25:05+00:00","note":null}],"documents":[{"id":106284,"url":"https://github.com/chenyme/grok2api/commit/199b3abecc14907176dae1f1cacf125419caa94d","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88843,"url":"https://github.com/chenyme/grok2api/releases/tag/v3.1.7","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}