CVE-2026-124587
A vulnerability was identified in elizaOS eliza 2.0.3-beta.7, specifically in the HTTP Server component's lifecycle/api-base-owner.ts file. The issue allows for remote information disclosure through an unknown function. An exploit is publicly available and can be used to take advantage of the vulnerability. A patch (cf6fa193017e70884e01c5bb7890f74b6b2b79d2) is available to remediate the issue.
Save an API key to vote.