CVE-2026-115718— Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt

Quick assessment

Affected

frappe builder

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Frappe Builder 1.33.0 至 1.35.x 版本（即早于 1.36.0 的版本）在接口中存在一个缺少授权验证的漏洞。该漏洞允许任何已认证的非访客（non-Guest）会话在未经适当权限检查的情况下调用大型语言模型（LLM）的补全功能。攻击者可通过调用 API，利用机制获取站点所有者存储的 OpenRouter API 密钥，从而消耗付费的 LLM 额度，实质上将该站点变为一个免费的 LLM 代理。

CVSS 4.3 · Medium Updated Oct 26, 2026

Possible ATT&CK Techniques 2 AI

T1557 · Adversary-in-the-Middle T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt

Source: CVE Program / CVE List V5

Vulnerability Description

Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制缺失

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
frappe	builder	1.33.0 ~ 1.36.0	-

II. Public POCs for CVE-2026-115718

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-115718

请登录查看更多情报信息。

Other References for CVE-2026-115718 (3)

https://github.com/frappe/builder/releases/tag/v1.36.0 patch
https://github.com/frappe/builder/security/advisories/GHSA-58mj-c563-p78w vendor-advisory
https://www.vulncheck.com/advisories/frappe-builder-before-missing-authorization-via-improve-prompt third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-115718

Same Patch Batch · frappe · 2026-10-26 · 4 CVEs total

CVE-2026-115717	7.7 HIGH	Frappe Builder before 1.36.1 SSRF via convert_to_webp
CVE-2026-116492	6.5 MEDIUM	Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API
CVE-2026-115720	5.0 MEDIUM	Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect

IV. Related Vulnerabilities

Same product: builder

Same vendor: frappe

Same weakness: CWE-862