CVE-2026-107685 Details
Description
Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust. ReqLLM.Streaming.WebSocketSession.Client.start/3 in lib/req_llm/streaming/web_socket_session/client.ex starts WebSockex without TLS options, and WebSockex defaults to insecure: true, which connects with verify: :verify_none. The option allowlist also drops any caller-supplied cacerts or ssl_options, so an application cannot turn verification on. The OpenAI Responses, Realtime, and Codex WebSocket paths reach this client and send the API key or OAuth access token in the authorization header. HTTP streaming through Finch and the HTTP/2 duplex session through Mint verify certificates and are not affected. This issue affects req_llm: from 1.9.0 before 1.29.0.
A vulnerability exists in the WebSocket streaming client of the Req_llm library, specifically in versions 1.9.0 prior to 1.29.0. This vulnerability allows an on-path attacker to read and modify OpenAI WebSocket sessions by exploiting improper certificate validation. The issue arises because the WebSocket client initiates connections without proper TLS options, defaulting to an insecure state that accepts any certificate. As a result, an attacker can intercept the connection, access the authorization bearer token, and manipulate the WebSocket session. This vulnerability affects OpenAI Responses, Realtime, and Codex WebSocket paths, which can transmit sensitive API keys or OAuth tokens in the authorization header.
Users can upgrade to Req_llm version 1.29.0 or later, which restores proper certificate verification for WebSocket connections. If an upgrade is not possible, avoid using the affected WebSocket paths and rely on the HTTP streaming options, which are not vulnerable.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2026CISA-ADP
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/agentjido/req_llm/security/advisories/GHSA-6vww-5m28-f26v | CISA-ADP | AdvisoryRemedyVendor |
| https://cna.erlef.org/cves/CVE-2026-107685.html | EEF | AdvisoryRemedy |
| https://github.com/agentjido/req_llm/commit/a389d718640ceb2d541a8f540ab954cbf5ef8313 | EEF | Source CodeVendor |
| https://github.com/agentjido/req_llm/commit/c7264fc0217fbacfb5562234ff790b8e4462de76 | EEF | Source CodeVendor |
| https://github.com/agentjido/req_llm/security/advisories/GHSA-6vww-5m28-f26v | EEF | AdvisoryRemedyVendor |
| https://osv.dev/vulnerability/EEF-CVE-2026-107685 | EEF | AdvisoryExploitRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-295 | Improper Certificate Validation | EEF |
Affected Products
| Product | Versions |
|---|---|
| agentjido req_llm | >= 1.9.0, < 1.29.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2026 | New CVE Received | EEF |