CVE-2026-0615

The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions.

Score

CVSS 3.1 7.3 High

Status

Analyzed - cret@cert.org

Published

2026-01-16

Last modified

2026-01-16

Affected products

• The Librarian (Thelibrarian)
• Thelibrarian.io (Thelibrarian)

References

• http://mindgard.ai/blog/thelibrarian-ios-ai-security-
• https://thelibrarian.io/