CVE-2026-63651
LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A prompt-injection payload embedded in fetched documentation can steer the model to call fetch_docs against internal or metadata endpoints and stream the response back into the conversation. This issue has been patched in version 0.7.0.
| CWE | CWE-918 |
| Vendor | psychquant |
| Product | livedocs |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for psychquant livedocs
Be the first to know when new unknown vulnerabilities affecting psychquant livedocs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
PsychQuant / livedocs
< 0.7.0