{"id":"CVE-2026-5585","state":"PUBLISHED","title":"Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure","description":"A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-04-05T17:30:10.903Z","updatedAt":"2026-04-06T18:01:16.859Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Tencent AI-Infra-Guard"],"affected":[{"vendor":"Tencent","product":"AI-Infra-Guard","versions":[{"version":"4.0","status":"affected"}],"modules":["Task Detail Endpoint"]}],"references":["https://vuldb.com/vuln/355384","https://vuldb.com/vuln/355384/cti","https://vuldb.com/submit/784198","https://gist.github.com/YLChen-007/fe4b834144ad535d167507c2008d4011"],"weaknesses":["CWE-200","CWE-284"],"ingestedAt":"2026-10-29T20:12:32.778Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/5xxx/CVE-2026-5585.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-5585","state":"PUBLISHED","datePublished":"2026-04-05T17:30:10.903Z","dateUpdated":"2026-04-06T18:01:16.859Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-04-04T21:33:44.168Z"},"containers":{"cna":{"title":"Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure","descriptions":[{"lang":"en","value":"A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Tencent","product":"AI-Infra-Guard","versions":[{"version":"4.0","status":"affected"}],"modules":["Task Detail Endpoint"]}],"references":[{"url":"https://vuldb.com/vuln/355384","name":"VDB-355384 | Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/355384/cti","name":"VDB-355384 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/784198","name":"Submit #784198 | Tencent AI-Infra-Guard \t4.0 \tInformation Disclosure (CWE-200)","tags":["third-party-advisory"]},{"url":"https://gist.github.com/YLChen-007/fe4b834144ad535d167507c2008d4011","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"Information Disclosure"}]},{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-04-05T17:30:10.903Z"},"timeline":[{"time":"2026-04-04T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-04-04T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-04-04T23:38:48.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Eric-y (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-06T18:01:04.937076Z","id":"CVE-2026-5585","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-06T18:01:16.859Z"}}]}}}