CyberSecBulletin

Ogx-ai vulnerabilities

We track 1 vulnerability in Ogx-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Ogx-ai vulnerabilities

  • 7.5 High severity

    ogx: Server-Side Request Forgery

    CVE-2026-85666Ogx-ai

    OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-compatible POST /v1/responses endpoint. MCP tool definitions accept a server_url parameter (along with headers and author