CVE-2026-63651

Fetched documentation could direct an agent toward private services

PsychQuant · LiveDocs agent documentation service

First documented disclosure · Review checkpoint

Summary

The documentation service accepted destinations and redirects without validating their network boundaries. Internal responses could be returned into the agent conversation.

Severity and exploitation evidence

High · 8.7/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The documentation service accepted destinations and redirects without validating their network boundaries.

Conditions required

An agent used affected lookup tools and followed instructions embedded in retrieved content.

Potential impact

Internal responses could be returned into the agent conversation.

Affected versions and configurations

Before 0.7.0.

Fix and mitigation status

0.7.0.

Practical next steps

Upgrade LiveDocs and limit the networks reachable by its fetch service.

Operating lesson

Check the authority granted to the affected component against the operation a user expects.

Evidence and limits

The public disclosure was on 2026-07-01. The CVE record was published on 2026-11-10.

Sources