pgEdge Go LLM Library: Disclosure of provider API key fragments in error messages
Summary
The pgEdge Go LLM Library from 0.1.0 up to (excluding) 0.2.0 contains an unauthenticated health endpoint (GET /v1/health) in its HTTP proxy that pings providers with the operator's real credentials and returns their error text. If a provider rejects the configured key and the proxy is reachable by a remote caller, the caller can obtain part of the operator's third-party provider API key. The Authorize hook permits access by default when the application does not configure it, which enables this. The vulnerability is rated medium (CVSS 3.1 score 5.8) and is associated with CWE-209 and CWE-522.
Affected
- pgEdge Go LLM Library (pgedge-go-llm-lib) versions >= 0.1.0 and < 0.2.0
- Applications that expose the library's HTTP proxy package and do not configure the Authorize hook
Fixed in
- Version 0.2.0 (per the CVE record)
- Note: v1.0.0 is reported to include the fix as well.
Workaround
- Configure the Authorize hook to block unauthenticated access to the proxy, if upgrading is not possible.
- Do not expose the proxy to the internet; restrict it to internal networks or place it behind a reverse proxy with authentication.
Exploitation
- Publicly known to be exploited: Unknown.
- No public proof of concept or CISA KEV listing was found at the time of writing.
Our recommendation
- Upgrade pgedge-go-llm-lib to version 0.2.0 or later (v1.0.0 is reported to include the fix).
- Check whether any service embeds the library's proxy and whether its health endpoint is reachable from untrusted networks.
- Configure the Authorize hook explicitly, and rotate provider API keys if exposure is suspected.
- Monitor logs for requests to /v1/health from unknown callers.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-8835-xmqj-354h github.com
- CVE Record CVE-2026-125328 www.cve.org
- Release v0.2.0 github.com
- Release v1.0.0 github.com
- Fix commit 8bb9a63 (redact credentials from provider error messages) github.com
- Fix commit 7531a55 (anchor credential shape patterns) github.com
- Pull request #26 github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 15:36.
Original description (NVD)
pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to ping providers with the operator's real credentials and returns their error text, while the Authorize hook in llm/proxy/proxy.go permits access by default when the consuming application does not configure it. When a provider rejects the configured credential, a remote caller who can reach the proxy can obtain part of the operator's third-party provider API key from the resulting error. This issue is fixed in version 0.2.0.
NVD references (5)
- https://github.com/pgEdge/pgedge-go-llm-lib/commit/7531a55d368b3a29cd173c792cc4609c4134b076
- https://github.com/pgEdge/pgedge-go-llm-lib/commit/8bb9a6380d5f8db0124b51605759897034ad4da1
- https://github.com/pgEdge/pgedge-go-llm-lib/pull/26
- https://github.com/pgEdge/pgedge-go-llm-lib/releases/tag/v0.2.0
- https://github.com/pgEdge/pgedge-go-llm-lib/security/advisories/GHSA-8835-xmqj-354h
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.