Description
A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Published: 2026-06-07
Score: 2.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A logic flaw in the Redeem function of the Redemption Code Top‑Up Endpoint allows a remote attacker to craft requests that result in incorrect handling of redemption operations. The error can lead to unauthorized addition or removal of credits via the API, disrupting the intended business flow. The vulnerability does not provide direct data exfiltration or code execution capabilities, but it can compromise the integrity of the credit system.

Affected Systems

All versions of songquanpeng one‑api up to 0.6.11‑preview.7 are vulnerable, as newer releases are not documented in the CVE data.

Risk and Exploitability

The CVSS score is 2.3, indicating low severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. A public exploit exists but is described as requiring high complexity and is considered difficult; consequently the overall risk is low to moderate, mainly impacting business process rather than system security.

Generated by OpenCVE AI on June 8, 2026 at 03:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Merge the pull request that corrects the redeem logic (https://github.com/songquanpeng/one-api/pull/2399) and deploy the updated application version.
  • If the pull request is not yet merged, consider temporarily disabling or blocking use of the redemption endpoint until a fix is applied.
  • After a fix is released, upgrade to the patched version or apply the merged changes to ensure the logic error is resolved.

Generated by OpenCVE AI on June 8, 2026 at 03:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 08 Jun 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 08 Jun 2026 01:00:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Title songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error
First Time appeared Songquanpeng
Songquanpeng one-api
Weaknesses CWE-840
CPEs cpe:2.3:a:songquanpeng:one-api:*:*:*:*:*:*:*:*
Vendors & Products Songquanpeng
Songquanpeng one-api
References
Metrics cvssV2_0

{'score': 2.1, 'vector': 'AV:N/AC:H/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 3.1, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Songquanpeng One-api
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-08T13:04:02.291Z

Reserved: 2026-06-07T09:01:03.731Z

Link: CVE-2026-11465

cve-icon Vulnrichment

Updated: 2026-06-08T13:03:58.941Z

cve-icon NVD

Status : Deferred

Published: 2026-06-07T23:16:42.060

Modified: 2026-06-08T14:57:14.757

Link: CVE-2026-11465

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-08T04:00:06Z

Weaknesses