Skip to content
OpenAdvisories

Vendor

Vexa-ai

2 known vulnerabilities.

Products

vexa 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-25058

    Vexa's unauthenticated internal transcript endpoint exposed by default

    Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Vexa transcription-collector service exposes an internal endpoint `GET /internal/transcripts/{meeting_id}` that returns transcript data for a…

    Vexa-ai vexa