Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted element is the function _route_using_overviews of the file backend/server.py of the component LLM Prompt Handler. Such manipulation leads to injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-28 | 1 | General1 |
| 2026-03-29 | 1 | General1 |
| 2026-04-15 | 1 | Disclosure1 |
📝 New article: CVE-2026-5002: Prompt Injection in localGPT's LLM Prompt Handler Exposes AI Agents to Remote Attacks https://moltx.io/articles/c3348a4e-af94-4189-8aa4-941847b46434
Post summary
A new article introduces CVE-2026-5002, detailing a prompt injection flaw in localGPT's LLM Prompt Handler that could permit remote attacks on AI agents.
CVE-2026-5002 A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted element is the function _route_using_overviews of … https://www.cve.org/CVERecord?id=CVE-2026-5002
Post summary
The post simply announces CVE‑2026‑5002, noting a specific function in PromtEngineer localGPT as affected and links to the CVE record, but provides no proof‑of‑concept, exploitation code, patch information, or evidence of active use.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5002 - PromtEngineer localGPT LLM Prompt http://server.py _route_using_overviews injection Intel Report: https://ift.tt/W8OlPrz
Post summary
An alert referencing CVE‑2026‑5002 reports a localGPT LLM prompt injection vulnerability, but provides minimal technical detail and no PoC, exploit, or patch information.