Description
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as access_token because User model objects are serialized after queries use Omit("password"), allowing an authenticated administrator to obtain the root user's bearer token and access root-only system configuration APIs. This issue is fixed in version 1.0.0-rc.7.
Published: 2026-08-17
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A bug in the QuantumNous new‑api before release 1.0.0‑rc.7 caused the admin user list and user lookup APIs, such as GET /api/user/, to return the full User.AccessToken value in the serialized JSON output. The exposed token is a bearer token with root privileges, so any authenticated administrator can capture it and then call root‑only configuration endpoints, yielding full system compromise.

Affected Systems

QuantumNous new‑api, all released versions older than 1.0.0‑rc.7, with the admin user list and user lookup APIs vulnerable.

Risk and Exploitability

The CVSS score of 9.1 reflects severe impact due to the potential for privilege escalation. The EPSS score is not available, so exploitation probability cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is an authenticated administrator who can issue an API call to GET /api/user/; the vulnerability is exploitable only after valid authentication, but the exposed token bypasses normal access control for root‑level operations.

Generated by OpenCVE AI on August 17, 2026 at 17:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade QuantumNous new‑api to version 1.0.0‑rc.7 or later, which removes the access_token from serialized responses.
  • Reconfigure the User model serialization to exclude sensitive fields such as User.AccessToken in all API responses, ensuring only non‑token fields are returned.
  • Implement least‑privilege controls or firewall rules to restrict access to the /api/user/ endpoint, monitoring for anomalous usage patterns.

Generated by OpenCVE AI on August 17, 2026 at 17:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-6x2c-phff-wx57 New API: User List API Leaks Root User Access Token Leading to Privilege Escalation
History

Mon, 17 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 17 Aug 2026 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Quantumnous
Quantumnous new-api
Vendors & Products Quantumnous
Quantumnous new-api

Mon, 17 Aug 2026 16:00:00 +0000

Type Values Removed Values Added
Description New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as access_token because User model objects are serialized after queries use Omit("password"), allowing an authenticated administrator to obtain the root user's bearer token and access root-only system configuration APIs. This issue is fixed in version 1.0.0-rc.7.
Title New API: User List API Leaks Root User Access Token Leading to Privilege Escalation
Weaknesses CWE-200
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Quantumnous New-api
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-17T18:56:39.405Z

Reserved: 2026-07-20T18:31:39.291Z

Link: CVE-2026-64859

cve-icon Vulnrichment

Updated: 2026-08-17T18:56:35.507Z

cve-icon NVD

Status : Received

Published: 2026-08-17T16:17:22.280

Modified: 2026-08-17T19:16:33.823

Link: CVE-2026-64859

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T17:30:18Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor