Zep Graph Service: Unauthenticated /clear & Cross-Tenant Access Flaw (CWE-306)

github.com 2026-09-14 查看中文 →

Security Advisory Critical Zep

Affected:

Zep Graph Service (server/graph_service) all API endpoints prior to authentication patch

Fixed in:

Graph Service release including GRAPH_SERVICE_API_KEY authentication middleware and /clear endpoint protection

Referenced CVEs: CVE-2026-90601 · 7.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.