CVE-2025-15550
MEDIUMbirkir prime <= 0.4.0. beta.0 - CSRF
Title source: llmDescription
birkir prime <= 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests. Attackers can craft malicious GET requests to trigger unauthorized actions against privileged users by manipulating GraphQL query parameters.
Scores
CVSS v3
5.3
EPSS
0.0001
EPSS Percentile
0.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Classification
CWE
CWE-352
Status
draft
Timeline
Published
Jan 29, 2026
Tracked Since
Feb 18, 2026