Is CVE-2026-92803 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-92803?

CVE-2026-92803 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-92803

Description

LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files. Attackers can bypass API key requirements and abuse ban lists to download files without authentication on protected instances.