CVE-2026-10812

216.73.217.176

· Published 04/06/2026 15:16 · Modified 04/06/2026 16:32

Labels: CVE-2026-10812 2026-06-04 CVE-2026-10812 CWE-327 [email protected]

Essential information

Published: 04/06/2026 15:16
Modified: 04/06/2026 16:32
Author: —
Creator: —
CVSS: 1.1 LOW (v3) 1.1 LOW (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument input_data["image"] results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. The exploitation is known to be difficult. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

NVD status

Status: Deferred — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
zilliztech / gptcache	`cpe:2.3:a:zilliztech:gptcache:<0.1.44:::::::*`