CVE-2026-0612

CVE-2026-0612 PUBLISHED

Description (CNA)

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.

Affected (CNA)

Vendor / product	Versions
TheLibrarian / TheLibrarian.io	affected 0 through 1.0

CWE

No CWE identifiers supplied.

References

http://mindgard.ai/blog/thelibrarian-ios-ai-security-
https://thelibrarian.io/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.