A vulnerability classified as critical has been found in QuantumNous new-api. This issue affects some unknown processing. This manipulation causes server-side request forgery.

This vulnerability is tracked as CVE-2026-42339. The attack is possible to be carried out remotely. No exploit exists.