Medium 5.3

OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated...

CVE-2026-126767 First seen on SecPulse Nov 12, 03:11

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
OpsTree Solutions	OpsTree SolutionsREMS	≤ 1.0.0→ Not listed	Not listed

This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.

Original description The description as published by the source.

OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and reveal internal orchestration instructions, aiding the crafting of further prompt injection attacks.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.3; CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4: Medium 5.3; CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Published: Nov 12, 2026
First seen on SecPulse: Nov 12, 03:11
GHSA: GHSA-4f34-q9vf-fwfg
CWE: CWE-1427

NVD GitHub Advisory

Tags(click for explanation)

All

CWE-1427 Opstree Solutions Rems

Detection sources

NIST National Vulnerability Database06:36
GitHub Security Advisories (Global)Nov 12, 06:33
CVE.org (CVE Program・cvelistV5)02:56