Skip to content
OpenAdvisories

Product · Predibase

LoRAX

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-108858

    Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

    Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other…

    Predibase LoRAX