CyberSecBulletin

LingGuoAI vulnerabilities

We track 2 vulnerabilities in LingGuoAI products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest LingGuoAI vulnerabilities

  • 8.8 High severity

    LingGuo-Drama: Missing Authorization

    CVE-2026-111723LingGuoAI

    LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcrypt

  • 8.1 High severity

    LingGuo-Drama: Authorization Bypass Through User-Controlled Key

    CVE-2026-111722LingGuoAI

    LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, P