CVE-2026-0613

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0613", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-01-05T17:40:07.817Z", "datePublished": "2026-01-16T12:46:02.733Z", "dateUpdated": "2026-01-16T21:41:53.497Z"}, "containers": {"cna": {"title": "CVE-2026-0613", "descriptions": [{"lang": "en", "value": "The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "TheLibrarian", "product": "TheLibrarian.io", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "references": [{"url": "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure"}, {"url": "https://thelibrarian.io/"}], "x_generator": {"engine": "VINCE 3.0.31", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-0613"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-16T12:46:02.733Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-16T21:41:27.699155Z", "id": "CVE-2026-0613", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T21:41:53.497Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0613", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-16T21:41:27.699155Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T21:41:46.800Z"}}], "cna": {"title": "CVE-2026-0613", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "TheLibrarian", "product": "TheLibrarian.io", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0"}]}], "references": [{"url": "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure"}, {"url": "https://thelibrarian.io/"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.31", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-0613"}, "descriptions": [{"lang": "en", "value": "The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-16T12:46:02.733Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0613", "state": "PUBLISHED", "dateUpdated": "2026-01-16T21:41:53.497Z", "dateReserved": "2026-01-05T17:40:07.817Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-01-16T12:46:02.733Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "TheLibrarian.io", "vendor": "TheLibrarian", "versions": [{"lessThanOrEqual": "1.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "cret@cert.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions."}, {"lang": "es", "value": "El Librarian contiene una vulnerabilidad interna de escaneo de puertos, facilitada por la herramienta 'web_fetch', que puede ser utilizada con un comportamiento de tipo SSRF para realizar solicitudes GET a direcciones IP y servicios internos, permitiendo el escaneo del entorno de nube de Hertzner que utiliza TheLibrarian. El proveedor ha corregido la vulnerabilidad en todas las versiones afectadas."}], "id": "CVE-2026-0613", "lastModified": "2026-06-17T10:11:05.050", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0613", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-16T21:41:27.699155Z", "version": "2.0.3"}}]}, "published": "2026-01-16T13:16:11.780", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory"], "url": "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure"}, {"source": "cret@cert.org", "tags": ["Product"], "url": "https://thelibrarian.io/"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T16:05:05.811661+00:00", "value": {"mitigation_remediation": ["Upgrade to the latest patched release of TheLibrarian that addresses the web_fetch SSRF flaw.", "Enforce firewall or NAT rules that block outbound traffic from web_fetch to internal networks, limiting the scope of the SSRF.", "Restrict access to the web_fetch endpoint by implementing authentication or role\u2011based controls, ensuring only authorized users can invoke the function."], "summary": {"action": "Apply Fix", "impact": "Internal Network Discovery via SSRF"}, "threat_synthesis": {"affected_systems": "All versions of TheLibrarian.io that include the vulnerable web_fetch tool are affected. The vendor has fixed the issue in all affected releases.", "description_and_impact": "The Librarian contains an internal port scanning flaw built into its web_fetch utility. The flaw allows an attacker to issue GET requests that the application forwards to arbitrary internal IP addresses and ports. This server\u2011side request forgery can be leveraged to probe the internal network, revealing services and configurations deployed in the Hertzner cloud infrastructure that the application relies on. Such reconnaissance can expose critical services that might later be targeted for credential theft or further attacks.", "risk_and_exploitability": "The CVSS score of 7.5 conveys a high severity, yet the EPSS score of less than 1% indicates a low expected exploitation probability in the wild. The vulnerability is not listed in the CISA KEV catalog. An attacker only needs to invoke the web_fetch endpoint with crafted parameters; no additional privileges are required. Exploitation grants internal network visibility but does not provide direct code execution or data exfiltration capabilities."}}}}, "created": "2026-01-19T09:20:50.142365+00:00", "title": "Internal Port Scanning via SSRF in web_fetch", "updated": "2026-04-18T16:15:04.596416+00:00", "vendors": ["thelibrarian", "thelibrarian$PRODUCT$thelibrarian"]}