VulnerabilityAnalyzed

CVE-2026-0616

The vendor has fixed the vulnerability in all affected versions.

HIGH 7.5EPSS 0.36%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.36%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.36% probability · 29th percentile
CISA KEV: Not listed
Affected: thelibrarian/the librarian
Source: cret@cert.org

References

https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosureThird Party Advisory
https://thelibrarian.io/Product

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.