CVE-2026-116634 | cheaper-inference OmniRoute up to 3.8.51 /api/sync/tokens missing authentication

October 26, 2026 Yanac

A vulnerability was found in cheaper-inference OmniRoute up to 3.8.51 and classified as critical. This issue affects some unknown processing of the file /api/sync/tokens. Such manipulation leads to missing authentication.

This vulnerability is traded as CVE-2026-116634. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More