HighVulnerabilityLLM-specific
CVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-63651
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
LiveDocs versions before 0.7.0 pass client-supplied URLs from fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) directly to URLSession, with no scheme or host allowlist and unconditional redirect following. A prompt-injection payload in fetched documentation can steer the model to call fetch_docs against internal or metadata endpoints and return the responses into the conversation.
Mitigation
Fixed in 0.7.0.
Topics
Related items
- HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
- MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySimilar attack · MSRC Security Update Guide
- HighGHSA-ghwv-vrp2-2975: Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU AttacksSimilar attack · GitHub Advisory Database
- MediumGHSA-5m6c-38r8-5w76: Dagu MCP DAG specification read bypasses path containment and workspace isolationSimilar attack · GitHub Advisory Database
- HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database