Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:lightrag-Hku:lightrag-Hku:*:*:*:*:*:*:*:*

1 brief RSS
medium threat

Unauthenticated Brute-Force Vulnerability in LightRAG-HKU

The /login endpoint in LightRAG-HKU versions prior to 1.5.5 lacks rate limiting or account lockout, enabling high-speed credential brute-force attacks.

exploited lightrag-hku vulnerability authentication web-application
1r 1t 1c