Privategpt
Approved changes feed: RSS · Atom
cpe:2.3:a:zylon:privategpt:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zylon (b592f4dc-2f5a-5f94-b142-f6caf0efae38) |
|---|---|
| Product | Privategpt (3ff11f70-7884-54f8-9e8b-349b781a2f0e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116000 |
vulnerable | 2026-11-03 10:15:22.085611 |
Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
HIGH (7.3)
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-10-25T02:15:12.758Z
Updated: 2026-10-26T17:37:17.406Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4515 |
vulnerable | 2026-06-08 07:29:16.373464 |
Zylon PrivateGPT settings.yaml cross-domain policy
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-10T20:31:04.532Z
Updated: 2025-05-12T14:39:41.539Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.