CVE-2026-72581 | duhow xiaoai-patch Auth Endpoint api/main.py url server-side request forgery (fb07049)

A vulnerability described as critical has been identified in duhow xiaoai-patch. This affects an unknown function of the file api/main.py of the component Auth Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. This vulnerability is handled as CVE-2026-72581. The attack can be executed remotely. There...