CVE-2026-73264: Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration acce
Summary
Prowler is a cloud security platform that had a vulnerability in versions before 5.33.1 where authenticated users could trick the system into sending API keys (secret credentials used for authorization) to attacker-controlled or internal endpoints by providing a malicious URL through the Lighthouse provider configuration.
Solution / Mitigation
Update Prowler to version 5.33.1 or later, where this issue is fixed.
Vulnerability Details
7.6(high)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N
network
low
high
none
August 12, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73264
First tracked: August 12, 2026 at 02:09 PM
Classified by LLM (prompt v3) · confidence: 85%