Skip to content
Threat Feed
Subscribe

Product

Lightrag-Hku (< 1.5.5)

1 brief RSS
medium threat

Unauthenticated Brute-Force Vulnerability in LightRAG-HKU

The /login endpoint in LightRAG-HKU versions prior to 1.5.5 lacks rate limiting or account lockout, enabling high-speed credential brute-force attacks.

exploited lightrag-hku vulnerability authentication web-application
1r 1t 1c