Is CVE-2026-105049 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105049?

CVE-2026-105049 has a CVSS v3 severity of MEDIUM (5.8).

Back

CVE-2026-105049

Description

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.