CVE-2026-30762
2 advisories.
PyPI/lightrag-hku CVE-2026-30762: high 7.5
LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass
Action: Upgrade lightrag-hku to 1.4.13 or later.
pip install lightrag-hku==1.4.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.13 | - |
Fixed versions
| 1.4.13 |
Sources
- osv: GHSA-mcww-4hxq-hfr3
- https://github.com/HKUDS/LightRAG/security/advisories/GHSA-mcww-4hxq-hfr3
- https://github.com/HKUDS/LightRAG
CVE-2026-30762 · published · modified · JSON
PyPI/lightrag-hku CVE-2026-30762: high 7.5
LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass
Action: Upgrade lightrag-hku to 1.4.13 or later.
pip install lightrag-hku==1.4.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.13 | - |
Fixed versions
| 1.4.13 |
Sources
- osv: PYSEC-2026-2593
- https://github.com/HKUDS/LightRAG/security/advisories/GHSA-mcww-4hxq-hfr3
- https://github.com/HKUDS/LightRAG
- https://pypi.org/project/lightrag-hku
- https://github.com/advisories/GHSA-mcww-4hxq-hfr3
- https://nvd.nist.gov/vuln/detail/CVE-2026-30762
CVE-2026-30762 · published · modified · JSON