Skip to content
OpenAdvisories

Vendor

neuml

1 known vulnerabilities.

Products

txtai 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58449

    txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

    txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is …

    neuml txtai