CVE-2026-107685: req_llm 1.9.0 to before 1.29.0

Affected technology

req_llm · 1.9.0 to before 1.29.0
agentjido

req_llm · a389d718640ceb2d541a8f540ab954cbf5ef8313 to before c7264fc0217fbacfb5562234ff790b8e4462de76
agentjido

Component: 'Elixir.ReqLLM.Streaming.WebSocketSession.Client', 'Elixir.ReqLLM.Streaming.WebSocketSession', 'Elixir.ReqLLM.Providers.OpenAI.WebSocket', 'Elixir.ReqLLM.OpenAI.Realtime', 'Elixir.ReqLLM.Providers.OpenAICodex'
Function: 'Elixir.ReqLLM.Streaming.WebSocketSession.Client':start/3, 'Elixir.ReqLLM.Streaming.WebSocketSession':start_link/2, 'Elixir.ReqLLM.Streaming.WebSocketSession':init/1, 'Elixir.ReqLLM.Providers.OpenAI.WebSocket':start_responses_session/2, 'Elixir.ReqLLM.OpenAI.Realtime':connect/2, 'Elixir.ReqLLM.Providers.OpenAICodex':start_responses_session/2
File: lib/req_llm/streaming/web_socket_session/client.ex, lib/req_llm/streaming/web_socket_session.ex, lib/req_llm/providers/openai/web_socket.ex, lib/req_llm/openai/realtime.ex, lib/req_llm/providers/openai_codex.ex

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An on-path attacker can read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust. Source advisory’s CVSS 4.0 assessment (base score 9.1/10) rates confidentiality and integrity impact as high; availability impact as none.