Improper Authorization in chenyme grok2api Video Job Retry Handler

CVE-2026-124574

What is CVE-2026-124574?

A vulnerability has been identified in the chenyme grok2api that affects the Video Job Retry Handler component. Specifically, the issue lies in the beginSelectionSession function of the video.go file, leading to improper authorization. This vulnerability allows remote attackers to exploit the system, giving them unauthorized access to functions or data. The vulnerability has been publicly disclosed and may be exploited. The issue is resolved in version 3.1.7, and users are strongly recommended to upgrade their installations. For further details, refer to the associated patch (commit 199b3abecc14907176dae1f1cacf125419caa94d) and the release notes.

References