Skip to content
OpenAdvisories

Vendor

theopenco

1 known vulnerabilities.

Products

LLMGateway 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2026-108719

    LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

    LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliv…

    theopenco LLMGateway