PT-2026-25015 · Git+2 · Hyperterse

Samrith-S · Publicado 2026-03-12 · Atualizado 2026-03-12 · CVE-2026-31841

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hyperterse versions prior to 2.2.0

Description Hyperterse is a framework designed for building AI-ready backend surfaces. Prior to version 2.2.0, the search tool permitted Large Language Models (LLMs) to search for tools using natural language. During the return of results, Hyperterse inadvertently exposed raw SQL queries, revealing statements intended for internal execution and shielded from public display. The search tool allows LLMs to search for tools using natural language. The exposed queries originated from database operations specified by users for tools to execute. The vulnerable components include the search tool and the underlying database query mechanisms.

Recommendations Versions prior to 2.2.0 should be updated to version 2.2.0 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-433

Identificadores relacionados

CVE-2026-31841

GHSA-92GP-JFGX-9QPV

Produtos afetados

Hyperterse

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31841.json · Exploit
• https://github.com/hyperterse/hyperterse · Nota
• https://github.com/hyperterse/hyperterse/releases/tag/v2.2.0 · Nota
• https://github.com/hyperterse/hyperterse/security/advisories/GHSA-92gp-jfgx-9qpv · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-31841 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-92gp-jfgx-9qpv · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2032230701735481599 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-31841 · Aviso do Fabricante
• https://t.me/CVEtracker/47274 · Publicação no Telegram