CVE-2026-0612

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0612", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-01-05T17:39:25.528Z", "datePublished": "2026-01-16T12:44:59.806Z", "dateUpdated": "2026-01-16T21:42:52.062Z"}, "containers": {"cna": {"title": "CVE-2026-0612", "descriptions": [{"lang": "en", "value": "The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "TheLibrarian", "product": "TheLibrarian.io", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "references": [{"url": "http://mindgard.ai/blog/thelibrarian-ios-ai-security-"}, {"url": "https://thelibrarian.io/"}], "x_generator": {"engine": "VINCE 3.0.31", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-0612"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-16T12:44:59.806Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-16T21:42:18.745012Z", "id": "CVE-2026-0612", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T21:42:52.062Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0612", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-16T21:42:18.745012Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T21:42:37.828Z"}}], "cna": {"title": "CVE-2026-0612", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "TheLibrarian", "product": "TheLibrarian.io", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0"}]}], "references": [{"url": "http://mindgard.ai/blog/thelibrarian-ios-ai-security-"}, {"url": "https://thelibrarian.io/"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.31", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-0612"}, "descriptions": [{"lang": "en", "value": "The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-16T12:44:59.806Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0612", "state": "PUBLISHED", "dateUpdated": "2026-01-16T21:42:52.062Z", "dateReserved": "2026-01-05T17:39:25.528Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-01-16T12:44:59.806Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "TheLibrarian.io", "vendor": "TheLibrarian", "versions": [{"lessThanOrEqual": "1.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "cret@cert.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian."}, {"lang": "es", "value": "El librer\u00edario contiene una vulnerabilidad de fuga de informaci\u00f3n a trav\u00e9s de la herramienta 'web_fetch', que puede ser utilizada para recuperar contenido externo arbitrario proporcionado por un atacante, lo que puede ser utilizado para redirigir solicitudes a trav\u00e9s de la infraestructura de El librer\u00edario. El proveedor ha corregido la vulnerabilidad en todas las versiones de TheLibrarian."}], "id": "CVE-2026-0612", "lastModified": "2026-06-17T10:11:04.910", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0612", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-16T21:42:18.745012Z", "version": "2.0.3"}}]}, "published": "2026-01-16T13:16:11.677", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory"], "url": "http://mindgard.ai/blog/thelibrarian-ios-ai-security-"}, {"source": "cret@cert.org", "tags": ["Product"], "url": "https://thelibrarian.io/"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T19:09:14.625170+00:00", "value": {"mitigation_remediation": ["Apply the latest vendor patch that addresses the web_fetch vulnerability.", "If an immediate upgrade is not possible, disable or restrict the web_fetch tool so that it cannot retrieve external content.", "Monitor outbound traffic from The Librarian for unusual or unexpected requests that may indicate abuse."], "summary": {"action": "Patch Immediately", "impact": "Information Leakage"}, "threat_synthesis": {"affected_systems": "The L\u202fibrarian.io product, known simply as The Librarian, is impacted. All releases prior to the vendor\u2011provided fix are vulnerable, and the vendor has released a patch that removes the flaw from every current version of the application.", "description_and_impact": "The Librarian contains an information\u2011leakage vulnerability linked to its web_fetch tool. The tool allows an attacker to request any external URL, causing the application to fetch the content and potentially expose it. This can be used to proxy arbitrary requests through the Librarian\u2019s infrastructure, effectively turning the service into a relay for malicious traffic or enabling the retrieval of sensitive information that shouldn\u2019t be publicly accessed. The flaw represents an information exposure weakness that could expose data the application is not intended to disclose.", "risk_and_exploitability": "The CVSS base score of 7.5 places the weakness in the high\u2011severity range. The EPSS score of less than 1% indicates a low likelihood of exploitation at present, and it is not currently listed in the CISA KEV catalog. The most likely attack route is a network\u2011based request: an attacker can supply a crafted URL to the web_fetch tool and cause The Librarian to retrieve arbitrary content, thereby using the system as a proxy or leaking external data. No privileged execution is required on the target system."}}}}, "created": "2026-01-19T09:20:39.669362+00:00", "title": "The Librarian web_fetch tool enables arbitrary external content retrieval and proxy abuse", "updated": "2026-04-18T19:15:10.612099+00:00", "vendors": ["thelibrarian", "thelibrarian$PRODUCT$thelibrarian"], "weaknesses": ["CWE-200", "CWE-918"]}