CVE-2026-107685 - WebSocket 連線未驗證 TLS 憑證，暴露 API 金鑰與 OAuth 令牌給中間人攻擊者
CVE-2026-107685 - WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers
CVE-2026-107685 發現 agentjido req_llm 的 WebSocket 客戶端未驗證 TLS 憑證，允許中間人竊取 OpenAI API 金鑰與 OAuth 令牌。
漏洞揭示 WebSocket 連線缺乏 TLS 憑證驗證，提醒開發者務必啟用證書檢查以保護 API 金鑰。
Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust. ReqLLM.Streaming.WebSocketSession.Client.start/3 in lib/req_llm/streaming/web_socket_session/client.ex starts WebSockex without TLS options, and WebSockex defaults to insecure: true, which connects with verify: :verify_none. The option allowlist also drops any caller-supplied cacerts or ssl_options, so an application cannot turn verification on. The OpenAI Responses, Realtime, and Codex WebSocket paths reach this client and send the API key or OAuth access token in the authorization header. HTTP streaming through Finch and the HTTP/2 duplex session through Mint verify certificates and are not affected. This issue affects req_llm: from 1.9.0 before 1.29.0.
Impact
Affected Products
The following products are affected by CVE-2026-107685
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
| ID | Vendor | Product | Action |
|---|---|---|---|
| 1 | Agentjido | req_llm |
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 4.0 | CRITICAL | 6b3ad84c-e1a6-4bf7-a703-f496b71e49db |
Update req_llm to version 1.29.0 or later to fix improper certificate validation.
- Update req_llm to version 1.29.0 or later.
- Ensure TLS certificate validation is enabled.
- Review WebSocket client configurations.
- Apply security patches to agentjido.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-107685 vulnerability anywhere in the article.
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.