VULNERABILITY INTELLIGENCE

CVE-2026-50755

CVSS score9.8 CRITICAL

EPSS probability0.62%

CISA KEVNot currently listed

Published2026-07-21

Last modified2026-10-24

Description

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value