CVE-2025-64859: New-API User List API Leak Leads to Privilege Escalation

github.com 2026-08-18查看中文 →

Security AdvisoryCVE-2025-64859CriticalQuantumNous/new-api

Affected:

new-api < v1.0.0-rc.7

Fixed in:

v1.0.0-rc.7

Referenced CVEs: CVE-2026-64859 · 9.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

RocketChat Omnichannel HTML Escaping Fix (XSS) 2026-08-21 CSRF Vulnerability in Dynamic Input Field Generator with PoC 2026-08-21 PHP Improper Input Validation: Array-to-String Coercion Bypass in submit.php (CWE-20) 2026-08-21 Python urllib HTTP Auth Bypass: Patch and POC for Scheme Matching Vulnerability 2026-08-21 Genian NAC/ZTNA Unauthenticated Admin Credential Disclosure Vulnerability 2026-08-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive