ogx vulnerabilities

1 known vulnerability in ogx from Ogx-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ogx: Server-Side Request Forgery

  CVE-2026-85666Sep 4, 2026Ogx-ai

  OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-compatible POST /v1/responses endpoint. MCP tool definitions accept a server_url parameter (along with headers and author