comppolicylab vulnerabilities

Products

• pingpong 1

Latest comppolicylab CVEs

Newest publication first

1. CVE-2026-32097 PingPong has improper access control in thread file endpoints allows access outside intended scope

   Published 2026-03-11

   High·CVSS 8.6 EPSS 0.33%

   PingPong is a platform for using large language models (LLMs) for teaching and learning. Prior to 7.27.2, an authenticated user may be able to retrieve or delete files outside the intended authorization scope. This issue could result in retrieval or deletion of private files, inc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.