{"data":{"id":"e0025bee-0148-4baa-a45b-52b44338c598","title":"CVE-2026-107685: Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path…","summary":"Improper certificate validation in the WebSocket streaming client of agentjido req_llm lets an on-path attacker read and modify OpenAI WebSocket sessions, including the authorization bearer token, when the client accepts an untrusted TLS certificate. ReqLLM.Streaming.WebSocketSession.Client.start/3 starts WebSockex without TLS options, so it defaults to verify: :verify_none, and the option allowlist drops caller-supplied cacerts or ssl_options. The OpenAI Responses, Realtime, and Codex WebSocket paths are affected, while HTTP streaming through Finch and the HTTP/2 session through Mint are not. Versions 1.9.0 before 1.29.0 are affected.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-107685","publishedAt":"2026-10-23T12:18:06.410Z","cveId":"CVE-2026-107685","cweIds":["CWE-295"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["req_llm","OpenAI Responses API","OpenAI Realtime API","OpenAI Codex WebSocket","OpenAI WebSocket sessions"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"req_llm WebSocket streaming client accepts untrusted TLS certificates","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-23T18:09:23.684Z","kevDateAdded":null,"advisoryAliases":["GHSA-w53j-6pxf-r2vw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-23T18:09:27.243Z","patchAvailable":null,"disclosureDate":"2026-10-23T12:18:06.410Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}