CVE-2026-90769 | LFNovo Open Notebook up to 1.10.x URL Validation /api/sources url server-side request forgery

September 13, 2026 Yanac

A vulnerability was found in LFNovo Open Notebook up to 1.10.x. It has been rated as problematic. The affected element is an unknown function of the file /api/sources of the component URL Validation. The manipulation of the argument url leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-90769. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More