Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-119712

PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Pipeshub Pipeshub-ai
Products
Pipeshub Pipeshub-ai
CVE-2026-119711

PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints, enabling password spraying and OTP or password-reset email flooding.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Pipeshub
Products
Pipeshub
CVE-2026-119710

PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing connector:delete and lock checks to remove connector instances and purge record embeddings.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Pipeshub Pipeshub-ai
Products
Pipeshub Pipeshub-ai
CVE-2025-67506

PipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File Upload

PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload to os.path.join(tmpdir, file.filename) without normalizing the filename. An attacker can submit a crafted filename containing ../ sequences to write arbitrary files anywhere the service account has permission, enabling remote file overwrite or planting malicious code. This issue is fixed in version 0.1.0-beta.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Pipeshub Pipeshub-ai
Products
Pipeshub Pipeshub-ai