CVE-2026-67598 Details
Description
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by presenting arbitrary TLS certificates, as CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST are unconditionally disabled across sendStream(), sendImageRequest(), send(), and fetchSearchHtml() with no option to re-enable verification. Attackers can perform man-in-the-middle interception to extract Authorization Bearer API keys from every AI request and inject crafted AI responses that may be acted upon by the tool-call execution pipeline, including the query_database and update_config tool handlers.
A vulnerability exists in Emlog Pro versions through 2.6.23, where TLS certificate validation is disabled for outbound HTTPS requests to AI providers. This flaw, located in 'include/service/ai.php', allows network-adjacent attackers to intercept these requests by presenting arbitrary TLS certificates. The disabled validation, due to 'CURLOPT_SSL_VERIFYPEER' and 'CURLOPT_SSL_VERIFYHOST' being turned off, creates an opportunity for man-in-the-middle attacks. Attackers can extract 'Authorization: Bearer' API keys from AI requests and inject manipulated AI responses that the application may execute through its tool-call pipeline, particularly with the 'query_database' and 'update_config' tool handlers.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 3, 2026CISA-ADP
Assessed Aug 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/emlog/emlog/security/advisories/GHSA-hf85-99vj-m4c5 | CISA-ADP | AdvisoryExploitVendor |
| https://github.com/emlog/emlog/security/advisories/GHSA-hf85-99vj-m4c5 | [email protected] | AdvisoryExploitVendor |
| https://www.vulncheck.com/advisories/emlog-pro-tls-certificate-validation-disabled-in-ai-php | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-295 | Improper Certificate Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Emlog Pro | <= 2.6.23 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | CISA-ADP |
| Aug 3, 2026 | New CVE Received | [email protected] |