CVE-2026-5585

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-5585

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5585.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-5585

Published

2026-04-05T17:30:10.903Z

Modified

2026-07-15T01:49:10.028350563Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

Details

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cwe_ids": [
        "CWE-200",
        "CWE-284"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5585.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.0"
                },
                {
                    "last_affected": "4.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/tencent/ai-infra-guard

Affected ranges

Type

GIT

Repo

https://github.com/tencent/ai-infra-guard

Events

Introduced

fbbd506f8c71fe4997568e4b4e0e78c8b2d3fff7

Last affected

fbbd506f8c71fe4997568e4b4e0e78c8b2d3fff7

Database specific

{
    "cpe": "cpe:2.3:a:tencent:ai-infra-guard:4.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0"
        },
        {
            "last_affected": "4.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*

4.0

v4.*

v4.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5585.json"