{"data":{"id":"363021ab-359e-4f56-8571-397ad344e0fb","title":"CVE-2026-5002: A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted…","summary":"CVE-2026-5002 affects PromtEngineer localGPT up to commit 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The flaw sits in the function _route_using_overviews in backend/server.py, within the LLM Prompt Handler component, and manipulation there leads to injection. The attack can be performed remotely, and public exploit code may be used.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-5002","publishedAt":"2026-03-28T17:16:45.450Z","cveId":"CVE-2026-5002","cweIds":["CWE-74","CWE-707"],"cvssScore":"7.3","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["localGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PromtEngineer localGPT injection in LLM Prompt Handler via remote attack","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00316,"epssCheckedAt":"2026-11-09T12:10:44.456Z","kevDateAdded":null,"advisoryAliases":["GHSA-gf8v-vm5f-44rx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:10:48.470Z","patchAvailable":null,"disclosureDate":"2026-03-28T17:16:45.450Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}