https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T01:41:21.493748+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111668 fkie_cve-2026-111668 2026-10-26T01:41:21.494922+00:00

AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read organization-wide AI spend, and can modify suggestion statuses or generate reports.

 https://db.gcve.eu/vuln/ghsa-xq66-q5m4-496q GHSA-xq66-q5m4-496q 2026-10-26T01:41:21.494986+00:00

AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read organization-wide AI spend, and can modify suggestion statuses or generate reports.