> CVE-2025-57806

« BACK_TO_HOME
PUBLISHED
2025-09-03 01:15
MODIFIED
2025-09-04 15:36
EPSS (Prob. Exploit)
0.07%
Top 100.0%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-28

> DESCRIPTION

Local Deep Research is an AI-powered research assistant for deep, iterative research. Versions 0.2.0 through 0.6.7 stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page. Users were not given the ability to configure the database location, allowing anyone with access to the container or host filesystem to retrieve sensitive data in plaintext by accessing the .db file. This is fixed in version 1.0.0.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-4h8c-qrcq-cv5c MODERATE

Local Deep Research's API keys are stored in plain text

AFFECTED PACKAGES:
PIP / local-deep-research
> 0.2.0, < 1.0.0
Fixed in: 1.0.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/09/2025 01:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:08
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME