CVE-2026-126767

Not enough EPSS history yet.

OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and reveal internal orchestration instructions, aiding the crafting of further prompt injection attacks.

• gist.github.comhttps://gist.github.com/neelkotnis/548bfde3e45bc3793f3f26e1f9a43efe
• opstree.comhttps://opstree.com/rems-ai-powered-observability/
• www.vulncheck.comhttps://www.vulncheck.com/advisories/opstree-rems-through-1.0.0-prompt-injection-via-rca-chat-assistant

No related CVEs by CWE or product.