CVE-2026-115718GHSA-58mj-c563-p78w

Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt

frappe builder

Open in Threatline Record JSON

CVSS

5.3Medium

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed in1.36.0Fixed versionCVE List

Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

1.36.0builderCVE List
1.36.0frappe/builder, otherGitHub

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

🚨 CVE-2026-115718 Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLMTelegram: CVE Notify, 26 Oct 2026

Description

Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any authenticated non-Guest session to invoke LLM completions without proper permission checks. Attackers can call the improve_prompt API to leverage the site owner's stored OpenRouter API key via resolve_api_key, consuming paid LLM credits and effectively turning the site into a free LLM proxy.

Text from CVE List

Affected versions 2

builderaffected: 1.33.0 before 1.36.0CVE List
frappe/builder, other>= 1.33.0, < 1.36.0GitHub