CVE-2026-1169

low-risk

Published 2026-01-19

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Prime

Affected Vendors

Birkir

References (5)

https://github.com/birkir/prime/

Exploit https://github.com/birkir/prime/issues/547

Permissions Required https://vuldb.com/?ctiid.341763

Third Party Advisory https://vuldb.com/?id.341763

Third Party Advisory https://vuldb.com/?submit.731287

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal