Lfnovo vulnerabilities
We track 1 vulnerability in Lfnovo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest Lfnovo vulnerabilities
- 7.7 High severity
open-notebook: Server-Side Request Forgery
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network servi