CVE-2026-19352

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-19352
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19352.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-19352
Published
2026-08-09T12:15:39Z
Modified
2026-10-25T02:31:00Z
Severity
  • 1.3 (Low) CVSS_V4 - CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
mifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery
Details

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the local network. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been publicly disclosed and may be utilized. This patch is called 260802348955231442c4bae6c2d9d8ede947af0a. It is best practice to apply a patch to resolve this issue. The project maintainer provides this view: "I'm not sure that this is a critical vulnerability, because it is behind an experimental CLI flag and the NTLM behavior isn't really a LosslessCut bug." The CVSS vector reflects the high level of pre-requisites.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-918"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19352.json"
}
References

Affected packages

Git / github.com/mifi/lossless-cut

Affected ranges

Type
GIT
Repo
https://github.com/mifi/lossless-cut
Events
Introduced
4fd916eaa9f86ff565f1a2d862743cceaf3174d1
Fixed
260802348955231442c4bae6c2d9d8ede947af0a
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "3.0"
                },
                {
                    "last_affected":  "3.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.1"
                },
                {
                    "last_affected":  "3.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.2"
                },
                {
                    "last_affected":  "3.2"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.3"
                },
                {
                    "last_affected":  "3.3"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.4"
                },
                {
                    "last_affected":  "3.4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.5"
                },
                {
                    "last_affected":  "3.5"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.6"
                },
                {
                    "last_affected":  "3.6"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.7"
                },
                {
                    "last_affected":  "3.7"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.8"
                },
                {
                    "last_affected":  "3.8"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.9"
                },
                {
                    "last_affected":  "3.9"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.10"
                },
                {
                    "last_affected":  "3.10"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.11"
                },
                {
                    "last_affected":  "3.11"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.12"
                },
                {
                    "last_affected":  "3.12"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.13"
                },
                {
                    "last_affected":  "3.13"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.14"
                },
                {
                    "last_affected":  "3.14"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.15"
                },
                {
                    "last_affected":  "3.15"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.16"
                },
                {
                    "last_affected":  "3.16"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.17"
                },
                {
                    "last_affected":  "3.17"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.18"
                },
                {
                    "last_affected":  "3.18"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.19"
                },
                {
                    "last_affected":  "3.19"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.20"
                },
                {
                    "last_affected":  "3.20"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.21"
                },
                {
                    "last_affected":  "3.21"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.22"
                },
                {
                    "last_affected":  "3.22"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.23"
                },
                {
                    "last_affected":  "3.23"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.24"
                },
                {
                    "last_affected":  "3.24"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.25"
                },
                {
                    "last_affected":  "3.25"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.26"
                },
                {
                    "last_affected":  "3.26"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.27"
                },
                {
                    "last_affected":  "3.27"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.28"
                },
                {
                    "last_affected":  "3.28"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.29"
                },
                {
                    "last_affected":  "3.29"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.30"
                },
                {
                    "last_affected":  "3.30"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.31"
                },
                {
                    "last_affected":  "3.31"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.32"
                },
                {
                    "last_affected":  "3.32"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.33"
                },
                {
                    "last_affected":  "3.33"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.34"
                },
                {
                    "last_affected":  "3.34"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.35"
                },
                {
                    "last_affected":  "3.35"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.36"
                },
                {
                    "last_affected":  "3.36"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.37"
                },
                {
                    "last_affected":  "3.37"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.38"
                },
                {
                    "last_affected":  "3.38"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.39"
                },
                {
                    "last_affected":  "3.39"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.40"
                },
                {
                    "last_affected":  "3.40"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.41"
                },
                {
                    "last_affected":  "3.41"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.42"
                },
                {
                    "last_affected":  "3.42"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.43"
                },
                {
                    "last_affected":  "3.43"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.44"
                },
                {
                    "last_affected":  "3.44"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.45"
                },
                {
                    "last_affected":  "3.45"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.46"
                },
                {
                    "last_affected":  "3.46"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.47"
                },
                {
                    "last_affected":  "3.47"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.48"
                },
                {
                    "last_affected":  "3.48"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.49"
                },
                {
                    "last_affected":  "3.49"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.50"
                },
                {
                    "last_affected":  "3.50"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.51"
                },
                {
                    "last_affected":  "3.51"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.52"
                },
                {
                    "last_affected":  "3.52"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.53"
                },
                {
                    "last_affected":  "3.53"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.54"
                },
                {
                    "last_affected":  "3.54"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.55"
                },
                {
                    "last_affected":  "3.55"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.56"
                },
                {
                    "last_affected":  "3.56"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.57"
                },
                {
                    "last_affected":  "3.57"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.58"
                },
                {
                    "last_affected":  "3.58"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.59"
                },
                {
                    "last_affected":  "3.59"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.60"
                },
                {
                    "last_affected":  "3.60"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.61"
                },
                {
                    "last_affected":  "3.61"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.62"
                },
                {
                    "last_affected":  "3.62"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.63"
                },
                {
                    "last_affected":  "3.63"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.64"
                },
                {
                    "last_affected":  "3.64"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.65"
                },
                {
                    "last_affected":  "3.65"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.66"
                },
                {
                    "last_affected":  "3.66"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.67"
                },
                {
                    "last_affected":  "3.67"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.68"
                },
                {
                    "last_affected":  "3.68"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.69.0"
                },
                {
                    "last_affected":  "3.69.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "260802348955231442c4bae6c2d9d8ede947af0a"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

3.*
3.0
3.1
3.10
3.11
3.12
3.13
3.14
3.15
3.16
3.17
3.18
3.19
3.2
3.20
3.21
3.22
3.23
3.24
3.25
3.26
3.27
3.28
3.29
3.3
3.30
3.31
3.32
3.33
3.34
3.35
3.36
3.37
3.38
3.39
3.4
3.40
3.41
3.42
3.43
3.44
3.45
3.46
3.47
3.48
3.49
3.5
3.50
3.51
3.52
3.53
3.54
3.55
3.56
3.57
3.58
3.59
3.6
3.60
3.61
3.62
3.63
3.64
3.65
3.66
3.67
3.68
3.69.0
3.7
3.8
3.9
v3.*
v3.0.0
v3.0.1
v3.1.0
v3.10.0
v3.11.0
v3.12.0
v3.13.0
v3.14.0
v3.15.0
v3.16.0
v3.16.1
v3.16.2
v3.16.3
v3.16.4
v3.17.0
v3.17.1
v3.17.10
v3.17.11
v3.17.12
v3.17.13
v3.17.14
v3.17.16
v3.17.17
v3.17.18
v3.17.19
v3.17.2
v3.17.20
v3.17.21
v3.17.22
v3.17.23
v3.17.24
v3.17.25
v3.17.26
v3.17.27
v3.17.28
v3.17.29
v3.17.3
v3.17.30
v3.17.31
v3.17.32
v3.17.33
v3.17.4
v3.17.5
v3.17.6
v3.17.7
v3.17.8
v3.17.9
v3.18.0
v3.19.0
v3.2.0
v3.20.0
v3.20.1
v3.21.0
v3.22.0
v3.22.1
v3.22.2
v3.22.3
v3.23.0
v3.23.1
v3.23.2
v3.23.3
v3.23.4
v3.23.5
v3.23.6
v3.23.7
v3.23.8
v3.24.0
v3.25.0
v3.26.0
v3.27.0
v3.28.0
v3.29.0
v3.29.1
v3.3.0
v3.30.0
v3.31.0
v3.31.1
v3.32.0
v3.33.0
v3.33.1
v3.34.0
v3.34.1
v3.34.2
v3.34.3
v3.35.0
v3.36.0
v3.37.0
v3.38.0
v3.39.0
v3.39.1
v3.39.2
v3.4.0
v3.40.0
v3.41.0
v3.42.0
v3.43.0
v3.44.0
v3.45.0
v3.46.0
v3.46.1
v3.46.2
v3.46.3
v3.47.0
v3.47.1
v3.49.0
v3.5.0
v3.50.0
v3.51.0
v3.51.1
v3.52.0
v3.53.0
v3.54.0
v3.56.0
v3.57.0
v3.58.0
v3.59.0
v3.59.1
v3.6.0
v3.61.0
v3.61.1
v3.62.0
v3.63.0
v3.64.0
v3.65.0
v3.66.0
v3.66.1
v3.67.0
v3.67.1
v3.67.2
v3.68.0
v3.68.1
v3.69.0
v3.7.0
v3.8.0
v3.9.0
v3.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19352.json"