{"data":{"id":"684753e4-b45f-4eab-941b-4f9a8b83d09a","title":"CVE-2023-34094: ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models. A vulnerability in versions…","summary":"CVE-2023-34094 affects ChuanhuChatGPT, a graphical user interface for ChatGPT and other large language models, in versions 20230526 and prior. When authentication is not configured, an unauthorized party can access the config.json file of a privately deployed instance and steal the API keys it contains.","solution":"The vulnerability has been fixed in commit bfac445. As a workaround, set up access authentication.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-34094","publishedAt":"2023-06-02T20:15:09.850Z","cveId":"CVE-2023-34094","cweIds":["CWE-200","CWE-306"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ChuanhuChatGPT","ChatGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ChuanhuChatGPT unauthorized access to config.json exposing API keys","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00624,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T06:09:57.414Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-115","CAPEC-116"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}