-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIA Semantic Attack on Google Gemini - Read the Latest Research
A Semantic Attack on Google Gemini - Read the Latest Research
Miggo AI
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper access control in location deletion handling. The LocationController.delete method in Glance's v2 API was modified in all patched versions to add a critical check preventing removal of the last location. This indicates the original implementation lacked this security control, allowing authenticated users to trigger status changes and bypass immutability guarantees by removing the final location entry.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| glance | pip | >= 11.0.0, < 11.0.2 | 11.0.2 |