high7.3
CVE-2026-6662
A vulnerability was found in ericc-ch copilot-api up to 0.7.0.
Impact
A vulnerability was found in ericc-ch copilot-api up to 0.7.0. The impacted element is the function cors of the file src/server.ts of the component Token Endpoint. Performing a manipulation results in permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Affected products
| Product | Affected versions |
|---|---|
| Ericc-Ch Copilot-Api | before 0.7.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.