CVE-2026-123788— chenyme grok2api STT Billing voice_ws_handler.go behavioral workflow

Quick assessment

Affected

chenyme grok2api

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 chenyme grok2api 3.1.6 及更早版本中发现了一个安全漏洞。受影响的组件是 STT Billing，具体涉及文件 backend/internal/transport/http/inference/voice_ws_handler.go 中的某个未知函数。攻击者可远程利用该漏洞操纵该函数，从而强制改变行为工作流。升级到 3.1.7 版本即可修复此问题，相关补丁标识为 7ad0f791f0a9eb5a0ddfe38ac4dfcef01e19a6d4。建议尽快升级受影响组件。

CVSS 4.3 · Medium Updated Nov 07, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

chenyme grok2api STT Billing voice_ws_handler.go behavioral workflow

Source: CVE Program / CVE List V5

Vulnerability Description

A security vulnerability has been detected in chenyme grok2api up to 3.1.6. The impacted element is an unknown function of the file backend/internal/transport/http/inference/voice_ws_handler.go of the component STT Billing. The manipulation leads to enforcement of behavioral workflow. The attack may be initiated remotely. Upgrading to version 3.1.7 is sufficient to resolve this issue. The identifier of the patch is 7ad0f791f0a9eb5a0ddfe38ac4dfcef01e19a6d4. Upgrading the affected component is recommended.

Source: CVE Program / CVE List V5