GCVE-110-VULN-PYPI-2026-000633

If you run aimarket-logos 0.1.0 or 0.2.0, anyone who can reach its port directly can reset its rate limit with every request and spend your model budget through the language-model backed POST /api/v1/ask and /api/v1/chat routes past LOGOS_RATE_MAX. The limit is keyed on X-Real-IP, or an X-Forwarded-For entry, from any peer (app._client_key), and the logos entry point binds 0.0.0.0 (logos.main), although the code assumes it is reachable only through an edge proxy. Fixed in 0.2.1 for callers on public networks: the headers count only when the TCP peer is a loopback, private or link-local address. A caller on a private network the app shares with others is still trusted (GCVE-110-VULN-PYPI-2026-000638). Affects 0.1.0 and 0.2.0.