Unverified50% confidenceFactExact time
The CVSS vector for this vulnerability is: attack vector network, attack complexity low, no privileges required, no user interaction required, with only availability highly impacted, and no data leakage or privilege escalation involved.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
Unverified认证后门漏洞因攻击者无需前置权限、无需用户交互即可利用，在CVSS 3.x中通常被评为9.8分的严重等级76% similarVerifiedThe CVSS Common Vulnerability Scoring System ranges from 0 to 10 and comprehensively considers dimensions such as attack vector, attack complexity, whether user interaction is required, and the impact on confidentiality, integrity, and availability.75% similarUnverifiedWith a perfect CVSS score of 10, a score of 9.8 falls in the extremely high range of the 'Critical' level, meaning the vulnerability can be remotely triggered over the network, requires virtually no interaction, and has an extremely broad impact.74% similarUnverifiedGated release helps reduce the risk of a cybersecurity model's capabilities being directly obtained by malicious actors, but introduces integration friction in the form of access approval cycles, API availability guarantees, and data privacy agreements.73% similarUnverifiedThe difference between CVP and traditional bug bounties is that CVP authorizes specific organizations to probe the model's cybersecurity-related capabilities at a much deeper level, involving a degree of sensitivity far beyond ordinary vulnerability reports, and therefore requires a more stringent admission mechanism.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1003339API
curl https://kongchang.com/api/v1/knowledge/claims/1003339MCP
get_claim(id=1003339)