{"affected":[{"product":"livedocs","source":"CNA: GitHub_M","vendor":"PsychQuant","versions":[{"status":"affected","version":"< 0.7.0"}]}],"cveId":"CVE-2026-63651","cwes":["CWE-918"],"description":"LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A prompt-injection payload embedded in fetched documentation can steer the model to call fetch_docs against internal or metadata endpoints and stream the response back into the conversation. This issue has been patched in version 0.7.0.","epss":{"date":"2026-11-12","percentile":0.16363,"score":0.00249},"exploits":[],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.7,"severity":"high","source":"NVD: security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"}],"modifiedAt":1794506601281,"publishedAt":1794327916880,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/PsychQuant/livedocs/security/advisories/GHSA-xf4p-x7v8-3x4p"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/PsychQuant/livedocs/releases/tag/v0.7.0"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/PsychQuant/livedocs/releases/tag/v0.7.0"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/PsychQuant/livedocs/security/advisories/GHSA-xf4p-x7v8-3x4p"}],"remediation":[],"revision":"1591c096e9c2d3192e5408509367dc777c030e3f2d23458c3e57500a7f600d5a","sources":[{"modifiedAt":1794506601281,"name":"CNA: GitHub_M","retrievedAt":1794510632529,"url":"https://www.cve.org/CVERecord?id=CVE-2026-63651"},{"modifiedAt":1794331066143,"name":"NVD","retrievedAt":1794336326275,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63651"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794510639923,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-63651"}],"ssvc":{"assessedAt":1794501468795,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects","updatedAt":1794510639923}