PT-2026-3249 · Unknown · Supervisor+1

Published 2026-01-16 · Updated 2026-01-23 · CVE-2026-0615

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions TheLibrarian versions prior to the fixed version

Description The supervisord status page within TheLibrarian can be accessed via the web fetch tool, potentially exposing running processes in the backend. This allows for the retrieval of information about the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-0615

Affected Products

Thelibrarian

Supervisor

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-0615 · Security Note
• https://twitter.com/CVEnew/status/2012303251237126441 · Twitter Post
• https://reddit.com/r/KryptonSecurity/comments/1qi9poy/una_falla_en_la_inyecci%C3%B3n_de_mensajes_de_google · Reddit Post
• https://t.me/cveNotify/149735 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2012210089835327558 · Twitter Post
• https://thelibrarian.io · Note
• http://mindgard.ai/blog/thelibrarian-ios-ai-security- · Note