CVE-2026-11465

A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

CVSS v3 3.1 LOW
CVSS v2.0 2.1 LOW

3.1^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/songquanpeng/one-api/
https://github.com/songquanpeng/one-api/issues/2397
https://github.com/songquanpeng/one-api/pull/2399
https://vuldb.com/cve/CVE-2026-11465
https://vuldb.com/submit/833320
https://vuldb.com/vuln/369085
https://vuldb.com/vuln/369085/cti

Configurations

No configuration.

History

23 Jul 2026, 07:10

Type	Values Removed	Values Added
Summary		(es) Se ha descubierto una falla de seguridad en songquanpeng one-API hasta la versión 0.6.11-preview.7. Este problema afecta a la función Redeem del archivo model/redemption.go del componente Redemption Code Top-Up Endpoint. La manipulación resulta en errores de lógica de negocio. El ataque puede lanzarse de forma remota. El ataque requiere un alto nivel de complejidad. Se sabe que la explotación es difícil. El exploit ha sido publicado y puede usarse para ataques. La pull request para solucionar este problema espera ser aceptada.

07 Jun 2026, 23:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-07 23:16

Updated : 2026-07-23 07:10

NVD link : CVE-2026-11465

Mitre link : CVE-2026-11465

CVE.ORG link : CVE-2026-11465

JSON object : View

Products Affected

No product.

CWE

CWE-840

Business Logic Errors

{"id": "CVE-2026-11465", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11465", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-08T13:03:53.827422Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.6}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 1.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:songquanpeng:one-api:*:*:*:*:*:*:*:*"], "vendor": "songquanpeng", "modules": ["Redemption Code Top-Up Endpoint"], "product": "one-api", "versions": [{"status": "affected", "version": "0.6.11-preview.0"}, {"status": "affected", "version": "0.6.11-preview.1"}, {"status": "affected", "version": "0.6.11-preview.2"}, {"status": "affected", "version": "0.6.11-preview.3"}, {"status": "affected", "version": "0.6.11-preview.4"}, {"status": "affected", "version": "0.6.11-preview.5"}, {"status": "affected", "version": "0.6.11-preview.6"}, {"status": "affected", "version": "0.6.11-preview.7"}]}]}], "published": "2026-06-07T23:16:42.060", "references": [{"url": "https://github.com/songquanpeng/one-api/", "source": "cna@vuldb.com"}, {"url": "https://github.com/songquanpeng/one-api/issues/2397", "source": "cna@vuldb.com"}, {"url": "https://github.com/songquanpeng/one-api/pull/2399", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/cve/CVE-2026-11465", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/833320", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/369085", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/369085/cti", "source": "cna@vuldb.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-840"}]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance."}, {"lang": "es", "value": "Se ha descubierto una falla de seguridad en songquanpeng one-API hasta la versi\u00f3n 0.6.11-preview.7. Este problema afecta a la funci\u00f3n Redeem del archivo model/redemption.go del componente Redemption Code Top-Up Endpoint. La manipulaci\u00f3n resulta en errores de l\u00f3gica de negocio. El ataque puede lanzarse de forma remota. El ataque requiere un alto nivel de complejidad. Se sabe que la explotaci\u00f3n es dif\u00edcil. El exploit ha sido publicado y puede usarse para ataques. La pull request para solucionar este problema espera ser aceptada."}], "lastModified": "2026-07-23T07:10:00.113", "sourceIdentifier": "cna@vuldb.com"}