Advisories · Technology

Zylon PrivateGPT.

Every CVE that names Zylon PrivateGPT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116000 CVE record

CVSS 6.9 Medium

Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
- Zylon PrivateGPT
- Server-side request forgery (SSRF)
Not analysed yet 25 Oct 2026
CVE-2025-4515 CVE record

CVSS 5.3 Medium

Zylon PrivateGPT settings.yaml cross-domain policy
- Zylon PrivateGPT
- CWE-346
- CWE-942
Not analysed yet 10 May 2025