UNKNOWNCVE-2026-4994
wandb OpenUI APIStatusError server.py generic_exception_handler information exposure
Platform
python
Component
wandb
A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the file backend/openui/server.py of the component APIStatusError Handler. The manipulation of the argument key results in information exposure through error message. Access to the local network is required for this attack. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
How to fix
Actualice la biblioteca wandb a una versión posterior a 3.5-turb. Esto solucionará la vulnerabilidad de exposición de información. Consulte la documentación de wandb para obtener instrucciones sobre cómo actualizar la biblioteca.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free