SEC.co
Emergency

By weakness (CWE)

CWE-75: related vulnerabilities

CVEs classified under CWE-75. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-54771HIGH 8.1

    Langroid, a framework for building AI-powered chat applications, contains a vulnerability that allows attackers to bypass security controls and directly invoke tools even when those tools are explicitly disabled. An attacker with user-level access to a Langroid chat interface can send specially crafted JSON payloads to execute restricted functionality, leading to unauthorized actions. This affects versions prior to 0.65.3, and the issue has been resolved in that release.