What is CVE-2026-57942?

CVE-2026-57942 is a medium-severity vulnerability in Libretranslate, classified under CWE-348. CVSS score: 5.3/10. Published 2026-06-29.

How severe is CVE-2026-57942?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Libretranslate

CVE-2026-57942

LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function that allows unauthenticated attackers to spoof client IP addresses by injecting arbitrary values into the X-F…

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Libretranslate — versions 0, 397fd224080515d4001a1bc60c8fed53e3c56b6f

Weakness classification (CWE)

CWE-348

References

disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-57942?: CVE-2026-57942 is a medium-severity vulnerability in Libretranslate, classified under CWE-348. CVSS score: 5.3/10. Published 2026-06-29.
How severe is CVE-2026-57942?: Medium severity. CVSS v3 base score is 5.3 out of 10.