---
id: CVE-2026-73079
title: >-
  Sub2API is an AI API gateway platform designed to distribute and manage API
  quotas from AI product subscriptions
summary: >-
  Sub2API is an AI API gateway platform designed to distribute and manage API
  quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API
  keys issued to tenants are exchanged for upstream requests made with shared
  provider…
severity: high
cvss: 8.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N'
cwe:
  - CWE-22
  - CWE-441
vendor: Wei-Shaw
product: sub2api
affected:
  - 'sub2api >= 0.1.135, <0.1.169'
published: '2026-08-11'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T20:46:02.457'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-73079'
references:
  - url: >-
      https://github.com/Wei-Shaw/sub2api/commit/017f6bbd5edffea0639ef3c84c0391161983f1f3
    label: security-advisories@github.com
  - url: 'https://github.com/Wei-Shaw/sub2api/pull/5137'
    label: security-advisories@github.com
  - url: 'https://github.com/Wei-Shaw/sub2api/releases/tag/v0.1.169'
    label: security-advisories@github.com
  - url: >-
      https://github.com/Wei-Shaw/sub2api/security/advisories/GHSA-vrxq-qm4h-6hgg
    label: security-advisories@github.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-08-11T16:42:10.888388Z'
ingestedAt: '2026-09-10T14:24:20.526Z'
epss: 0.0031
epssPercentile: 0.2401
---

## Overview

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are exchanged for upstream requests made with shared provider accounts (ChatGPT/Codex OAuth, OpenAI platform keys, or an operator-configured base URL) that belong to the operator, not to the caller. The `POST /responses/*subpath` wildcard routes spliced the client-supplied subpath into the upstream URL with no validation. This lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials via a path traversal. This vulnerability is fixed in 0.1.169.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.