{"data":{"id":"c19cbd16-186e-4b3d-b615-2ae47f8f2990","title":"CVE-2026-73079: Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From…","summary":"Sub2API, an AI API gateway platform, has a path traversal flaw in the POST /responses/*subpath wildcard routes, affecting versions 0.1.135 through 0.1.168. The client-supplied subpath is spliced into the upstream URL without validation, letting an authenticated tenant send requests to arbitrary upstream endpoints using the operator's pooled provider credentials, such as ChatGPT/Codex OAuth or OpenAI platform keys.","solution":"Fixed in 0.1.169.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73079","publishedAt":"2026-08-11T16:17:39.713Z","cveId":"CVE-2026-73079","cweIds":["CWE-22","CWE-441"],"cvssScore":"8.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Sub2API","ChatGPT","Codex","OpenAI platform keys"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Sub2API path traversal in /responses wildcard routes exposes upstream","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00388,"epssCheckedAt":"2026-11-10T18:05:34.948Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T06:14:12.729Z","patchAvailable":null,"disclosureDate":"2026-08-11T16:17:39.713Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}