Skip to main content

CISA reports vulnerabilities in The Librarian

Source Decision Insights Threat Desk Published January 16, 2026 Companies 1
Human View Machine View

320th article in the last 90 days, one of 506 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA alerts on Redmi Buds 3 Pro through 6 Pro vulnerabilities (Jan 2026).

Companies mentioned

Best suited for

Seniority
Analyst
Job function
Cybersecurity / Information Security
Persona
Security Operations Practitioner
Buyer role
Technical Implementer / Administrator
Decision stage
How to start
Adoption curve
Early Adopters
Industry
Information Technology / Software & Services / IT Services / AI Infrastructure

Our classification, not the publisher's statement. Best suited for, not only for.

TheLibrarian.IO's Artificial Intelligence (AI) assistant The Librarian contains multiple flaws in internal helper tools that allow disclosure of system prompts and access to backend services, potentially exposing the administrative console and internal infrastructure.

The advisory identifies VU#383552.1, VU#383552.2, CVE-2026-0612, CVE-2026-0613, CVE-2026-0615, and CVE-2026-0616. VU#383552.1 affects the image_generation tool and can disclose the full system prompt by requesting an image with the embedded prompt. VU#383552.2 affects the view_document tool and can append the system prompt to an uploaded document. CVE-2026-0612 is an information-leak via the web_fetch tool that can retrieve arbitrary attacker-supplied external content and proxy requests. CVE-2026-0613 enables SSRF-style GET requests through web_fetch to internal Intrusion Prevention System (IPS) and services, permitting port scanning and metadata retrieval of the Hertzner cloud environment. CVE-2026-0615 allows web_fetch to retrieve the supervisord status page to list running processes. CVE-2026-0616 allows web_fetch to retrieve Adminer interface content that can be used to log in to the internal backend system.

An attacker who exploits these vulnerabilities could gain control over multiple aspects of TheLibrarian.IO internal infrastructure, including process control, lateral movement, and credential theft. The advisory cites CVE-2026-0614, CVE-2026-0615, and CVE-2026-0616 as largely responsible for this potential. It also states that VU#383552.1 through VU#383552.4 permit exploitation and potential misuse of The Librarian's capabilities and could result in jailbreaks or unintended actions by the AI.

The vendor has fixed the identified vulnerabilities and deprecated the affected tools. The vendor stopped the web-fetch tool from retrieving dangerous content and now handles web retrieval through a third-party service. The vendor stated, “prompt content is not a secrecy boundary in our threat model” with respect to system prompt disclosure.

One or more vendors are listed for this advisory; please reference the full report for more information. Contact us about this vulnerability.

Blog post, originally published by Christopher Cullen at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-reports-vulnerabilities-in-the-librarian/",
        "name": "CISA reports vulnerabilities in The Librarian",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-reports-vulnerabilities-in-the-librarian/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
      "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
    },
    "articleSection": [
      "Artificial Intelligence",
      "Cybersecurity"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "Analyst"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Information Security"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Practitioner"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Technical Implementer / Administrator"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Adopters"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / AI Infrastructure"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:32:28-06:00",
    "datePublished": "2026-01-16T09:03:11-07:00",
    "description": "The Librarian vulnerabilities include tools that disclosed system prompts and allowed internal web fetching and port scanning.",
    "headline": "CISA reports vulnerabilities in The Librarian",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Christopher Cullen"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/383552"
    },
    "keywords": [
      "Intrusion Prevention System",
      "Services",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-reports-vulnerabilities-in-the-librarian/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages