CVE-2026-124587 | elizaOS eliza 2.0.3-beta.7 HTTP Server api-base-owner.ts information disclosure (Issue 33034)

A vulnerability was found in elizaOS eliza 2.0.3-beta.7 and classified as problematic. The affected element is an unknown function of the file packages/app/platforms/electrobun/src/lifecycle/api-base-owner.ts of the component HTTP Server. Such manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2026-124587. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More