Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-108858 1 Predibase 1 Lorax 2026-10-13 5.5 Medium
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded through the instrumented GenerateParameters span field.