CVE-2026-82909 | QuantumNous new-api up to 1.0.0-rc.15 Revoked API Token /api/usage/token/ session expiration

August 31, 2026 Yanac

A vulnerability labeled as problematic has been found in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration.

This vulnerability appears as CVE-2026-82909. The attack may be performed from remote. In addition, an exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More