GHSA-4f34-q9vf-fwfgMediumCVSS 4.3
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated...
🔗 CVE IDs covered (1)
📋 Description
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and reveal internal orchestration instructions, aiding the crafting of further prompt injection attacks.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-126767
- https://gist.github.com/neelkotnis/548bfde3e45bc3793f3f26e1f9a43efe
- https://opstree.com/rems-ai-powered-observability
- https://www.vulncheck.com/advisories/opstree-rems-through-1.0.0-prompt-injection-via-rca-chat-assistant
- https://github.com/advisories/GHSA-4f34-q9vf-fwfg