Anx Calibre Manager
Monthly
Server-side request forgery in ANX Calibre Manager up to 1.13.12 allows an authenticated low-privileged user to supply a malicious base_url to the LLM Configuration Handler, causing LLMClient.chat to make outbound requests to attacker-chosen destinations. The issue is reachable only when the LLM integration feature is enabled and the attacker can access and submit configuration to that endpoint, with impact limited to low confidentiality disclosure. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.
Server-side request forgery in ANX Calibre Manager up to 1.13.12 allows an authenticated low-privileged user to supply a malicious base_url to the LLM Configuration Handler, causing LLMClient.chat to make outbound requests to attacker-chosen destinations. The issue is reachable only when the LLM integration feature is enabled and the attacker can access and submit configuration to that endpoint, with impact limited to low confidentiality disclosure. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.