{"id":"CVE-2026-63651","published":"2026-11-10T17:17:46.143","lastModified":"2026-11-10T17:17:46.143","description":"LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A prompt-injection payload embedded in fetched documentation can steer the model to call fetch_docs against internal or metadata endpoints and stream the response back into the conversation. This issue has been patched in version 0.7.0.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/PsychQuant/livedocs/releases/tag/v0.7.0","tags":[]},{"url":"https://github.com/PsychQuant/livedocs/security/advisories/GHSA-xf4p-x7v8-3x4p","tags":[]}],"exploitRefs":[{"url":"https://github.com/PsychQuant/livedocs/releases/tag/v0.7.0","tags":[]},{"url":"https://github.com/PsychQuant/livedocs/security/advisories/GHSA-xf4p-x7v8-3x4p","tags":[]}],"hasPoc":true,"ai":null}