{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-VULN-PYPI-2026-000638","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-27T22:42:51Z","dateUpdated":"2026-10-27T22:42:51Z","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"If you run aimarket-logos where hosts or containers you do not control share a private network with it, any of them can reset its rate limit with every request and spend your model budget through the language-model backed POST /api/v1/ask and /api/v1/chat routes past LOGOS_RATE_MAX. The logos entry point always binds 0.0.0.0 (logos.main), and the limit is keyed on X-Real-IP, or an X-Forwarded-For entry (app._client_key). 0.2.1 reads those headers only when the TCP peer is a loopback, private or link-local address (app._from_local_proxy). A neighbour on a private network is such a peer, so it still names its own key. In 0.1.0 and 0.2.0 a caller on any network could (GCVE-110-VULN-PYPI-2026-000633). No release limits header trust to your proxy. Affects 0.1.0 through 0.2.1.","supportingMedia":null}],"references":[{"url":"https://pypi.org/project/aimarket-logos/","name":"","tags":["advisory"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Use of Less Trusted Source","cweId":"CWE-348","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Control of Interaction Frequency","cweId":"CWE-799","type":"CWE"}]}],"affected":[{"vendor":"pypi","product":"aimarket-logos","collectionURL":"https://pypi.org","packageName":"aimarket-logos","repo":"","defaultStatus":"unknown","versions":[{"version":"0.1.0","status":"affected","versionType":"python","lessThan":"","lessThanOrEqual":"0.2.1","changes":null}],"cpes":null,"modules":["logos.app","logos.main"],"programFiles":["logos/app.py","logos/main.py"],"programRoutines":[{"name":"logos.app._from_local_proxy"},{"name":"logos.app._client_key"},{"name":"logos.main.main"}],"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}