Skip to content
OpenAdvisories

Vendor

LibreTranslate

2 known vulnerabilities.

Products

LibreTranslate 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-92803

    LibreTranslate through 1.9.6 Missing Access Check on the download_file Route

    LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files. Attackers can bypass API key requirements and abuse ban lists to download files without authentication on protecte…

    LibreTranslate LibreTranslate
  • Medium 5.3
    CVE-2026-57942

    LibreTranslate - IP Spoofing via X-Forwarded-For Header

    LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by injecting arbitrary values into the X-Forwarded-For header …

    LibreTranslate LibreTranslate