CVE-2026-108581: Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain plaintext LLM and voice provider API keys and abuse the upstream provider accounts.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated user with low privileges can exploit it. The affected endpoints validate only the user's JWT and do not enforce authorization for access to provider credentials.
Which credentials may be exposed?
The endpoints can return stored plaintext API keys for LLM providers and voice providers. An attacker could use those keys to consume or otherwise abuse the associated upstream provider accounts.
How can I determine whether an instance is affected?
Instances running Octop through version 1.0.2b6 are affected. To verify exposure, assess whether a low-privileged authenticated account can request GET /api/providers or GET /api/voice/providers and receive provider API keys.
What should be done if provider keys may have been exposed?
Treat provider API keys accessible through these endpoints as potentially compromised and rotate them with the relevant upstream providers. Restrict low-privileged access to the affected API endpoints until the authorization issue is remediated.