What is the CVSS score of CVE-2026-27812?

CVE-2026-27812 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-27812?

Sub2API versions prior to 0.1.85 contain a critical password reset poisoning vulnerability that allows attackers to redirect users to malicious sites and capture credentials, potentially compromising…

How to fix or mitigate CVE-2026-27812?

Within 24 hours: Isolate Sub2API instances from external networks if possible and disable password reset functionality until patched; notify all users to change passwords via secure out-of-band channels and monitor for unauthorized account access. Within 7 days: Implement WAF rules to block suspicious Host and Forwarded headers, conduct forensic analysis of password reset logs for exploitation evidence, and establish communication with the Sub2API vendor on patch timeline. Within 30 days: Deploy the patch immediately upon vendor release, conduct full account audit for unauthorized access, force password resets across all Sub2API users, and review API quota usage for anomalies.

AI / ML CVE-2026-27812

CRITICAL

Improper Encoding or Escaping of Output (CWE-116)

2026-02-26 security-advisories@github.com

XSS AI / ML Sub2api

9.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 26, 2026 - 00:16 nvd

CRITICAL 9.1

DescriptionGitHub Advisory

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. A vulnerability in versions prior to 0.1.85 is a Password Reset Poisoning (Host Header / Forwarded Header trust issue), which allows attackers to manipulate the password reset link. Attackers can exploit this flaw to inject their own domain into the password reset link, leading to the potential for account takeover. The vulnerability has been fixed in version v0.1.85. If upgrading is not immediately possible, users can mitigate the vulnerability by disabling the "forgot password" feature until an upgrade to a patched version can be performed. This will prevent attackers from exploiting the vulnerability via the affected endpoint.