PT-2026-25015 · Git+2 · Hyperterse

Samrith-S · Published 2026-03-12 · Updated 2026-03-12 · CVE-2026-31841

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hyperterse versions prior to 2.2.0

Description Hyperterse is a framework designed for building AI-ready backend surfaces. Prior to version 2.2.0, the search tool permitted Large Language Models (LLMs) to search for tools using natural language. During the return of results, Hyperterse inadvertently exposed raw SQL queries, revealing statements intended for internal execution and shielded from public display. The search tool allows LLMs to search for tools using natural language. The exposed queries originated from database operations specified by users for tools to execute. The vulnerable components include the search tool and the underlying database query mechanisms.

Recommendations Versions prior to 2.2.0 should be updated to version 2.2.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-433

Related Identifiers

CVE-2026-31841

GHSA-92GP-JFGX-9QPV

Affected Products

Hyperterse

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31841.json · Exploit
• https://github.com/hyperterse/hyperterse/security/advisories/GHSA-92gp-jfgx-9qpv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31841 · Security Note
• https://osv.dev/vulnerability/GHSA-92gp-jfgx-9qpv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-31841 · Vendor Advisory
• https://github.com/hyperterse/hyperterse · Note
• https://github.com/hyperterse/hyperterse/releases/tag/v2.2.0 · Note
• https://twitter.com/CVEnew/status/2032230701735481599 · Twitter Post
• https://t.me/CVEtracker/47274 · Telegram Post