Unverified50% confidenceFactExact time
In LSCBench's Go language LocalAI SSRF task, GPT-5.6-Sol's GetURI reads any path passed in, including file:// URLs; the reference fix restricts reads to within the model directory, but no model did this.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/14/2026
First Seen
Valid until: 1/12/2027
Sources
Related Entities
Related Claims
UnverifiedThe LiteLLM vulnerability GHSA-g5ff-637f-6q2m (high severity) affects versions before 1.95.0, where a user with the read-only role internal_user_viewer can read local files on the proxy host via vertex_ai_credentials, and at the time the advisory was published it had not yet entered the GitHub Advisory Database or OSV.dev, so pip-audit could not scan for it.59% similarUnverified搜索GPT-5.6提示词工程指南应使用英文关键词，中文搜索往往无法直接获取OpenAI官方指南57% similarUnverifiedWhen using gpt-5.4-nano as the base model, the agent exhibited the problem of describing file creation rather than actually executing commands, and repeatedly stated that it was unable to read stdout/stderr from commands.56% similarUnverifiedThe GPT-6 Astra model does not support tool calling (function calling), and does not support calling internet search tools.55% similarUnverifiedGPT-4 and Claude are closed models; users can only access them via paid API calls and cannot directly obtain model parameters.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1032212API
curl https://kongchang.com/api/v1/knowledge/claims/1032212MCP
get_claim(id=1032212)