Skip to content
OpenAdvisories

Product · OpenCSG

CSGHub

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-120426

    OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route

    OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded current_user parameter into the fil…

    OpenCSG CSGHub