Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-125328— pgEdge Go LLM Library discloses provider API key fragments in error messages

Quick assessment

Affected
pgEdge pgedge-go-llm-lib
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

pgEdge Go LLM 库为多个大语言模型（LLM）提供商提供统一的 Go 接口，支持流式响应、工具调用、重试机制，以及 HTTP 和服务器发送事件（SSE）代理功能。在从 0.1.0 到 0.2.0 的版本中， 文件中的 端点会调用 函数，使用操作员的真实凭证向各提供商发起探测请求，并直接返回提供商返回的错误信息；同时， 中的 钩子在消费方应用未显式配置时默认允许访问。当某个提供商拒绝已配置的凭证时，任何能够访问该代理的远程调用者均可从返回的错误信息中获取操作员第三方提供商 API 密钥的部分内容。该问题已在

CVSS 5.8 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
pgEdge pgedge-go-llm-lib >= 0.1.0, < 0.2.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-125328

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
pgEdge Go LLM Library discloses provider API key fragments in error messages
Source: CVE Program / CVE List V5
Vulnerability Description
pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to ping providers with the operator's real credentials and returns their error text, while the Authorize hook in llm/proxy/proxy.go permits access by default when the consuming application does not configure it. When a provider rejects the configured credential, a remote caller who can reach the proxy can obtain part of the operator's third-party provider API key from the resulting error. This issue is fixed in version 0.2.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过错误消息导致的信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
pgEdge pgedge-go-llm-lib >= 0.1.0, < 0.2.0 -

II. Public POCs for CVE-2026-125328

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-125328

请登录查看更多情报信息。

Other References for CVE-2026-125328 (4)

Same Patch Batch · pgEdge · 2026-11-10 · 8 CVEs total

CVE-2026-125323 7.8 HIGH pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopbac
CVE-2026-125327 7.5 HIGH pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated re
CVE-2026-125322 6.5 MEDIUM pgEdge Postgres MCP Server SQL injection in the count_rows where parameter
CVE-2026-125321 6.5 MEDIUM pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header
CVE-2026-125325 5.9 MEDIUM pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated r
CVE-2026-125326 5.8 MEDIUM pgEdge RAG Server discloses part of the configured provider credential through API error m
CVE-2026-125320 5.3 MEDIUM pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebinding

IV. Related Vulnerabilities

Same vendor: pgEdge
Same weakness: CWE-209