{"data":{"id":"21dee9d7-e35a-400b-81a3-cbd271b79b6e","title":"CVE-2026-6607: A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function…","summary":"CVE-2026-6607 affects lm-sys FastChat up to 0.2.36. A manipulation of the api_generate function in the Worker API Endpoint component leads to resource consumption and can be initiated remotely, and a public exploit has been disclosed.","solution":"Install the patch identified as c9e84b89c91d45191dc24466888de526fa04cf33. Commit ff66426 patched api_generate in base_model_worker.py but did not cover other entry points.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-6607","publishedAt":"2026-04-20T05:16:16.190Z","cveId":"CVE-2026-6607","cweIds":["CWE-400","CWE-404"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["fschat@<= 0.2.26"],"affectedPackageNames":["fschat"],"affectedPackageRefs":["pypi:fschat"],"affectedVendors":[],"affectedVendorsRaw":["FastChat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"lm-sys FastChat resource consumption in Worker API Endpoint api_generate","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00741,"epssCheckedAt":"2026-10-14T00:06:45.303Z","kevDateAdded":null,"advisoryAliases":["GHSA-5h65-jx66-j7p5"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:24.538Z","patchAvailable":null,"disclosureDate":"2026-04-20T05:16:16.190Z","capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}