EUVD-2026-60240
GHSA-6x2c-phff-wx57
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Requires an authenticated admin (PR:H) over the network with low complexity; the leaked root token crosses into root authority (S:C), yielding full config disclosure and control (C:H/I:H/A:H).
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
4DescriptionCVE.org
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as access_token because User model objects are serialized after queries use Omit("password"), allowing an authenticated administrator to obtain the root user's bearer token and access root-only system configuration APIs. This issue is fixed in version 1.0.0-rc.7.
AnalysisAI
Privilege escalation via token disclosure affects QuantumNous New API, an open-source LLM gateway and AI asset management platform, in all versions prior to 1.0.0-rc.7. The admin user-list and user-lookup endpoints (e.g. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated administrator account (CVSS PR:H) on a New API instance running a version earlier than 1.0.0-rc.7; the attacker then calls the admin user-list or user-lookup API (GET /api/user/) and reads the access_token field returned for the root user. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score is 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H), which is high, but the PR:H metric and the description both confirm the attacker must already hold an authenticated administrator account, so this is an escalation-from-admin-to-root issue rather than a pre-auth compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: 1.0.0-rc.7 - upgrade to https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.7, which stops serializing AccessToken in admin user responses and centralizes role authorization via canManageTargetRole. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify all deployments of QuantumNous New API and their current versions, and audit which users hold administrator privileges. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today