Is CVE-2026-115718 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-115718 being exploited in the wild.

How severe is CVE-2026-115718?

Medium severity, with a CVSS score of 4.3, published 26 October 2026.

Which products and versions are affected?

Frappe Builder 1.33.0 before 1.36.0.

Is there a fix for CVE-2026-115718?

Yes: fixed in 1.36.0. Until then: Remove the AI provider key from Builder's AI settings until the site is upgraded to version 1.36.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-115718 attacked?

It is attacked over the network.

Am I affected by CVE-2026-115718?

Check whether you run Frappe Builder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-115718: Frappe Builder missing authorization in improve_prompt endpoint

CVE-2026-115718 · Severity: medium · CVSS 4.3 · Published 2026-10-26

Frappe Builder is a website and application builder tool. A security flaw in versions 1.33.0 to 1.35.x allows any logged-in user to call the improve_prompt API endpoint without permission checks, letting them use the site owner's paid AI provider credits to run LLM completions. This effectively turns the site into a free AI proxy and can result in significant unexpected costs.

Technologies: Frappe Builder. Vendors: Frappe.

Quick answers

Is CVE-2026-115718 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-115718 being exploited in the wild.
How severe is CVE-2026-115718?: Medium severity, with a CVSS score of 4.3, published 26 October 2026.
Which products and versions are affected?: Frappe Builder 1.33.0 before 1.36.0.
Is there a fix for CVE-2026-115718?: Yes: fixed in 1.36.0. Until then: Remove the AI provider key from Builder's AI settings until the site is upgraded to version 1.36.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-115718 attacked?: It is attacked over the network.
Am I affected by CVE-2026-115718?: Check whether you run Frappe Builder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 1.36.0

Remove the AI provider key from Builder's AI settings until the site is upgraded to version 1.36.0 or later.

Technical details

The improve_prompt endpoint in builder.ai.api lacks authorization checks, allowing any authenticated user (including Website Users with no Builder access) to invoke LLM completions that consume the site owner's configured AI provider credits via resolve_api_key. The vulnerability is a missing authorization check (CWE-862) on a network-accessible API endpoint requiring only low-privilege authentication, with availability impact from credit exhaustion.

Affected products

Frappe Builder 1.33.0 before 1.36.0

Timeline

2026-10-26: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.