PT-2026-28721 · Unknown · Promtengineer Localgpt

Vuldb + 1 · Published 2026-03-28 · Updated 2026-03-29 · CVE-2026-5003

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PromtEngineer localGPT versions prior to 4d41c7d1713b16b216d8e062e51a5dd88b20b054

Description A flaw exists in PromtEngineer localGPT that allows for information disclosure. The issue is located in the handle index function within the rag system/api server.py file of the Web Interface component. Remote attackers can exploit this issue through manipulation. The exploit has been publicly released.

Recommendations Update PromtEngineer localGPT to a version later than 4d41c7d1713b16b216d8e062e51a5dd88b20b054.

Exploit

Fix

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

CVE-2026-5003

Affected Products

Promtengineer Localgpt

References · 7

• 🔥 https://github.com/August829/CVEP/issues/10 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5003 · Security Note
• https://twitter.com/CVEnew/status/2038135169358643419 · Twitter Post
• https://twitter.com/cyberbivash/status/2037967036739879360 · Twitter Post
• https://vuldb.com/vuln/353890 · Note
• https://vuldb.com/vuln/353890/cti · Note
• https://vuldb.com/submit/779148 · Note