openbq-org CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM openbq-org CVE published 2026-10-26

CVE-2026-116108

A flaw in openbq-org OpenBB up to 4.7.2/5.0.0 affects the Local API Server's api_settings.py file, leading to improper access controls. Remote exploitation is possible. The vendor was contacted but did not respond. This vulnerability impacts the confidentiality and integrity of affected systems. Defenders should verify exposure and prioritize patching. The CVE record and source item provide details on the [truncated]