Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-107685— WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers

Quick assessment

Affected
agentjido req_llm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 库的 WebSocket 流式客户端中存在证书验证不当的漏洞。该漏洞允许路径上的攻击者（on-path attacker）通过客户端不信任的 TLS 证书，读取并篡改 OpenAI 的 WebSocket 会话，其中包括授权 Bearer Token。 具体而言， 中的 函数在启动 时未传入 TLS 选项。由于 的默认配置为 ，这会导致连接时采用 （即不验证证书）。此外，该库的白名单（allowlist）机制会丢弃调用者提供的 或 ，因此应用程序无法启用证书验证。 受影响的 WebSocket 路径包括 Ope

CVSS 9.1 · Critical

Affected Version Matrix 2

VendorProduct Version RangeStatus
agentjido req_llm 1.9.0< 1.29.0 affected
a389d718640ceb2d541a8f540ab954cbf5ef8313< c7264fc0217fbacfb5562234ff790b8e4462de76 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-107685

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust. ReqLLM.Streaming.WebSocketSession.Client.start/3 in lib/req_llm/streaming/web_socket_session/client.ex starts WebSockex without TLS options, and WebSockex defaults to insecure: true, which connects with verify: :verify_none. The option allowlist also drops any caller-supplied cacerts or ssl_options, so an application cannot turn verification on. The OpenAI Responses, Realtime, and Codex WebSocket paths reach this client and send the API key or OAuth access token in the authorization header. HTTP streaming through Finch and the HTTP/2 duplex session through Mint verify certificates and are not affected. This issue affects req_llm: from 1.9.0 before 1.29.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
agentjido req_llm 1.9.0 ~ 1.29.0 cpe:2.3:a:agentjido:req_llm:*:*:*:*:*:*:*:*
agentjido req_llm a389d718640ceb2d541a8f540ab954cbf5ef8313 ~ c7264fc0217fbacfb5562234ff790b8e4462de76 cpe:2.3:a:agentjido:req_llm:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-107685

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-107685

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-107685 (1)

Vendor Advisories for CVE-2026-107685 (2)

Other References for CVE-2026-107685 (1)

IV. Related Vulnerabilities

Same weakness: CWE-295

V. Comments for CVE-2026-107685

No comments yet

Leave a comment