CVE-2026-25591 New API has an SQL LIKE Wildcard Injection DoS via Token Search
Authenticated users can cause denial of service in New API by injecting SQL wildcards into token search parameters, exhausting database resources.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-25591?
CVE-2026-25591 is a high-severity denial of service vulnerability in QuantumNous new-api, published on 24 Feb 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the `/api/token/search` endpoint allows authenticated users to cause denial of service through resource exhaustion by crafting malicious search patterns. The token search endpoint accepts user-supplied `keyword` and `token` parameters that are directly concatenated into SQL LIKE clauses without escaping wildcard characters (`%`, `_`). This allows attackers to inject patterns that trigger expensive database queries. Version 0.10.8-alpha.10 contains a patch.
Weakness: CWE-943
Which versions are affected by CVE-2026-25591?
3 open source packages ship an affected version, including github.com/QuantumNous/new-api. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/QuantumNous/new-api Go | All versions | 0.10.8-alpha.10 |
github.com/QuantumNous/new-api Go | All versions | 0.10.8-alpha.10 |
github.com/QuantumNous/new-api Go | All versions | 0.10.8-alpha.10 |
Products include Newapi New Api.
How do I fix CVE-2026-25591?
Upgrade github.com/QuantumNous/new-api to 0.10.8-alpha.10 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-25591 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-25591 exists.
Other vulnerabilities in QuantumNous new-api
- CVE-2025-55573 Cross-site scripting in n/a
- CVE-2026-33655 New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs
- CVE-2026-25802 New API has Potential XSS in its MarkdownRenderer component
- CVE-2026-41432 New API: Stripe Webhook Signature Bypass via Empty Secret Enables Unlimited Quota Fraud
- CVE-2026-42339 New API: SSRF Filter Bypass via 0.0.0.0
Sources
Also known as GHSA-w6x6-9fp7-fqm4, GO-2026-4531.