CVE-2026-107685 | agentjido req_llm up to 1.28.9 WebSocket Streaming Client client.ex ReqLLM.Streaming.WebSocketSession.Client.start certificate validation

October 23, 2026 Yanac

A vulnerability classified as problematic was found in agentjido req_llm up to 1.28.9. This affects the function ReqLLM.Streaming.WebSocketSession.Client.start of the file lib/req_llm/streaming/web_socket_session/client.ex of the component WebSocket Streaming Client. Such manipulation leads to improper certificate validation.

This vulnerability is uniquely identified as CVE-2026-107685. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More