TaskingAI CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM TaskingAI CVE published 2026-10-15

CVE-2026-111321

TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. This vulnerability can lead to potential exposure of sensitive information, disruption of service, and other security risks. Defenders should assess the exposure of thei [truncated]