{"id":"CVE-2026-117574","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-117574","generatedAt":"2026-11-04T11:56:55.520Z","title":"An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header.","description":"A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.","published":"2026-10-28T20:17:21.000Z","lastModified":"2026-11-03T14:17:25.000Z","status":"Awaiting Analysis","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L"},"cwe":["CWE-639"],"affected":[],"epss":{"score":0.00236,"percentile":0.14736,"date":"2026-11-03","history":[{"date":"2026-10-29","score":0.00236,"percentile":0.14686}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-28T20:17:21.000Z","detail":{"score":"9.1","severity":"CRITICAL","publishedAt":"2026-10-28T20:17:21.417Z"},"summary":"New CVE, critical severity (CVSS 9.1)."}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-117574","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494861","source":"secalert@redhat.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-117574","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}