Is CVE-2026-32879 actively exploited?

No active exploitation of CVE-2026-32879 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-32879 be exploited remotely?

Yes. CVE-2026-32879 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-32879?

CVE-2026-32879 has a CVSS score of 4.9 (MEDIUM).

HOME VULNERABILITIESCVE-2026-32879

MEDIUM

CVE-2026-32879

CWE-287Published: March 23, 2026· Updated: Mar 25, 2026

4.9

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:7.0th

Official Description

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Starting in version 0.10.0, a logic flaw in the universal secure verification flow allows an authenticated user with a registered passkey to satisfy secure verification without completing a WebAuthn assertion. As of time of publication, no known patched versions are available. Until a patched release is applied, do not rely on passkey as the step-up method for privileged secure-verification actions; require TOTP/2FA for those actions where operationally possible; or temporarily restrict access to affected secure-verification-protected endpoints.

NVD Source

Technical Analysis

CVE-2026-32879 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 4.9.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.