CVE-2026-68905 | lanshi17 Hugo Blog AI Assistant Proxy /api/blog-assistant missing authentication

November 13, 2026 Yanac

A vulnerability categorized as critical has been discovered in lanshi17 Hugo Blog. Affected by this issue is some unknown functionality of the file /api/blog-assistant of the component AI Assistant Proxy. Executing a manipulation can lead to missing authentication.

The identification of this vulnerability is CVE-2026-68905. The attack may be launched remotely. There is no exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More