Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was fixed in commit 34eca62 for gradio_block_arena_named.py, but three other files were missed.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-20 | 1 | Disclosure1 |
| 2026-04-21 | 1 | General1 |
CVE-2026-6608 A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation resul… https://www.cve.org/CVERecord?id=CVE-2026-6608
Post summary
The post announces CVE‑2026‑6608 affecting fastchat's add_text function, but contains no information about PoC, exploitation, patch, or active attacks.
CVE-2026-6608 Remote Code Execution in lm-sys fastchat Up to 0.2.36 Arena Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6608
Post summary
The post announces a newly identified Remote Code Execution vulnerability in lm‑sys fastchat (up to 0.2.36) without providing a PoC, exploit code, or patch details.