CVE-2026-0616

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0616", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-01-05T17:42:09.153Z", "datePublished": "2026-01-16T12:46:58.266Z", "dateUpdated": "2026-01-16T21:40:36.626Z"}, "containers": {"cna": {"title": "CVE-2026-0616", "descriptions": [{"lang": "en", "value": "TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "TheLibrarian", "product": "TheLibrarian.io", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "references": [{"url": "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure"}, {"url": "https://thelibrarian.io/"}], "x_generator": {"engine": "VINCE 3.0.31", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-0616"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-16T12:46:58.266Z"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-16T21:39:40.680029Z", "id": "CVE-2026-0616", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T21:40:36.626Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-0616", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-16T21:39:40.680029Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T21:40:00.476Z"}}], "cna": {"title": "CVE-2026-0616", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "TheLibrarian", "product": "TheLibrarian.io", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0"}]}], "references": [{"url": "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure"}, {"url": "https://thelibrarian.io/"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.31", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-0616"}, "descriptions": [{"lang": "en", "value": "TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-01-16T12:46:58.266Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0616", "state": "PUBLISHED", "dateUpdated": "2026-01-16T21:40:36.626Z", "dateReserved": "2026-01-05T17:42:09.153Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-01-16T12:46:58.266Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "TheLibrarian.io", "vendor": "TheLibrarian", "versions": [{"lessThanOrEqual": "1.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "cret@cert.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE8F0743-241A-47D8-B16A-8E3B94C6ABB8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions."}, {"lang": "es", "value": "La herramienta web_fetch de TheLibrarians puede usarse para recuperar el contenido de la interfaz de Adminer, que luego puede usarse para iniciar sesi\u00f3n en el sistema de backend interno de TheLibrarian. El proveedor ha corregido la vulnerabilidad en todas las versiones afectadas."}], "id": "CVE-2026-0616", "lastModified": "2026-06-17T10:11:05.327", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0616", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-16T21:39:40.680029Z", "version": "2.0.3"}}]}, "published": "2026-01-16T13:16:11.960", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory"], "url": "https://mindgard.ai/blog/thelibrarian-ios-ai-security-disclosure"}, {"source": "cret@cert.org", "tags": ["Product"], "url": "https://thelibrarian.io/"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T05:47:34.085701+00:00", "value": {"mitigation_remediation": ["Apply the vendor\u2019s latest patch that fixes the web_fetch/Adminer content retrieval issue.", "Disable or restrict access to the Adminer interface through firewall rules or network segmentation.", "Verify that internal backend authentication requires valid credentials and cannot be forged from retrieved content.", "Regularly monitor logs for unexpected login attempts from unfamiliar IP addresses."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized Backend Access"}, "threat_synthesis": {"affected_systems": "The affected product is TheLibrarian.io, a web management platform. All versions currently impacted have been rectified by the vendor; no specific version list is provided, but any installation not upgraded is vulnerable.", "description_and_impact": "TheLibrarian\u2019s web_fetch tool can obtain the Adminer interface content, which can then be used to log into the internal backend system. This allows an attacker to bypass normal authentication mechanisms and gain unauthorised access to sensitive administrative resources, potentially exposing confidential data and permitting further malicious actions. The vulnerability relies on improper access control, enabling exploitation without authentication.", "risk_and_exploitability": "The CVSS score of 7.5 indicates a high impact and medium exploitation complexity. The EPSS score of less than 1% suggests a very low likelihood of exploitation in the wild at present, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote, exploiting the public web_fetch endpoint to retrieve the Adminer content. Once the content is obtained, an attacker can craft a login to the backend, achieving unauthorized access to administrative controls."}}}}, "created": "2026-01-19T09:20:52.179762+00:00", "title": "Unauthorized Backend Access via Adminer Content Retrieval in TheLibrarian Web Fetch Tool", "updated": "2026-04-18T06:00:08.484226+00:00", "vendors": ["thelibrarian", "thelibrarian$PRODUCT$thelibrarian"], "weaknesses": ["CWE-284"]}