CyberSecBulletin

Vexa-ai vulnerabilities

We track 1 vulnerability in Vexa-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Vexa-ai vulnerabilities

  • 7.5 High severity

    vexa: Missing Authentication for Critical Functionality

    CVE-2026-25058Vexa-ai

    Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Vexa transcription-collector service exposes an internal endpoint `GET /internal/transcripts/{meeting_id}` that returns transcript data for an