THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-54457 (HIGH 7.7) — TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamical

[NVD] CVE-2026-54457 (HIGH 7.7) — TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamical

mednvdPublished 2026-08-21

CVE-2026-54457 CVSS: 7.7 HIGH Published: 2026-08-21T21:17:00.267

TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamically overrides the [object_storage] configuration. Selec

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54457