CVE-2026-107685 (CRITICAL, CVSS 9.1): agentjido req_llm <1.29.0 WebSocket client disables TLS verification, exposing OpenAI sessions to MITM attacks. Restrict use or network access until patched. https://radar.offseq.com/threat/cve-2026-107685-cwe-295-improper-certificate-validation-in-agentjido-reqllm-c06aa809808f4159 #OffSeq #CVE #infosec #vulnerability
