CVE-2026-112297: ptbsare anx-calibre-manager LLM Configuration llm.py LLMClient.chat server-side request forgery
A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component LLM Configuration Handler. This manipulation of the argument baseurl causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs low-privileged access to the application, as indicated by the PR:L vector component. Exploitation can be initiated remotely and does not require user interaction.
Which deployments are known to be affected?
ptbsare anx-calibre-manager versions up to and including 1.13.12 are affected. The provided information does not establish whether any particular default configuration exposes the vulnerable LLM Configuration Handler.
What does successful exploitation allow?
The flaw allows server-side request forgery through manipulation of the LLM configuration base_url argument in LLMClient.chat. The supplied severity vector indicates low confidentiality impact and no stated integrity or availability impact.
How urgent is remediation?
The issue is rated medium severity with a CVSS score of 4.3, but a public exploit has been published and may be used. The vendor reportedly did not respond to the disclosure, so no vendor remediation information is provided.