What happened
NVD/CVE.org published CVE-2026-73079 (CVSS 8.5, High) on 2026-08-11, describing a path-traversal flaw in the AI API gateway's wildcard routing that exposes shared upstream provider credentials to tenants who should not have access.
Why it matters
Sub2API brokers access to shared, often high-value AI provider subscriptions (ChatGPT/Codex OAuth) across multiple tenants; a path traversal that exposes these shared credentials could allow one tenant to exhaust or hijack another's paid AI provider access or exfiltrate the operator's own OAuth tokens.
Attack vector
The wildcard POST /responses/subpath route handling allows an authenticated tenant to path-traverse and gain access to upstream requests made with the operator's shared provider accounts, rather than being confined to their own quota/permissions.
Affected systems
Sub2API 0.1.135 to 0.1.168
Mitigation
Upgrade Sub2API beyond 0.1.168; validate/canonicalize subpath routing to prevent traversal outside tenant-scoped boundaries.