CVE-2026-24903: Algonet Orcastatllm Researcher

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.

Affected products

• Algonet Orcastatllm Researcher: version 1 only

Published 2026-02-06. Last modified 2026-06-17.