Skip to content
OpenAdvisories

Vendor

Zylon

2 known vulnerabilities.

Products

PrivateGPT 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-4515

    Zylon PrivateGPT settings.yaml cross-domain policy

    A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy with untrusted doma…

    Zylon PrivateGPT