{"vulnerability": "cve-2026-85734", "sightings": [{"uuid": "59e52d7e-17c0-452c-912f-5685e24f54a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85734", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4qvv4o7g2p", "content": "CVE-2026-85734 - lightrag\nThe LightRAG version before 1.5.5 lets anyone try passwords on the /login page without any slowdown or lockout. This means an attacker can keep guessing until they find a correct\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lightrag #hkuds #CVE #infosec", "creation_timestamp": "2026-09-22T17:30:07.076083Z"}, {"uuid": "1fdae83a-9fae-4c15-8759-550aa9aae384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85734", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4t4gjuc72y", "content": "\ud83d\udea8 CVE-2026-85734 \u2014 CVSS 9.1 CRITICAL\n\nLightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85734\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T18:09:33.817944Z"}, {"uuid": "44c0b58c-8243-41be-95cd-259c6e1eaaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85734", "type": "published-proof-of-concept", "source": "https://github.com/HKUDS/LightRAG/security/advisories/GHSA-frch-4w6v-q5xx", "content": "", "creation_timestamp": "2026-09-22T22:35:18.250872Z"}]}