Tools AI Risk Radar ai-incident-0129
Incident record
R2R completion requests can reach attacker-chosen addresses
- Severity
- High
- Status
- Proof-of-concept
- Type
- Infra Vuln
- Target
- SciPhi-AI R2R through 3.6.6
- Actor
- researcher
- CVE
- CVE-2026-105148
What happened
R2R’s retrieval-completion endpoint accepts a user-selected API base address and can make the server request that destination. The CVE, published on 4 October, describes a public proof of concept and scores the flaw 7.3 High under CVSS 3.1.
The affected setting is generation_config.api_base. The CVE vector requires no privileges; authentication configured by a particular deployment can still govern access to the endpoint. The record identifies no fixed release.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-105148
- GitHub advisory recordgithub.com/advisories/GHSA-2j4q-255p-4658
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026