OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route
Affects OpenCSG CSGHub through v2.6.0-ce, specifically the OpenCSGs/csghub portal together with csghub-server v2.6.0-ce. CVSS rates it High at 8.7. No fixed version is listed.
Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.
- Exploited
- No known exploitation
- Fix
- No fix listed
- Who is exposed
- Not reported
Do first: Workaround: The checked facts contain no workaround or mitigation, so none can be recommended here. The OpenCSG advisory should be consulted for any interim step.
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- Published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- A 0-100 score for how much a CVE matters across the industry: exploitation, exposure, how widely the software is used, severity and whether a fix exists.What do these mean? →
- 21/100 · provisional
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Unclear
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
OpenCSG CSGHub, an open-source platform for hosting and managing AI models, code, and spaces, is affected by this vulnerability. An unauthenticated remote attacker could exploit the file resolve route to read files from private model, code, and space repositories that they should not have access to.
Read the original description
OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded current_user parameter into the file path, which the portal forwards with its server API key, to read files in private model, code or space repositories.
What to do
Workaround: The checked facts contain no workaround or mitigation, so none can be recommended here. The OpenCSG advisory should be consulted for any interim step.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- OpenCSG CSGHub
through v2.6.0-ce
Evidence 8
- Report
- Repository
- Repository
- Repository
- Repository
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about CVE-2026-120426
What does this mean?
A flaw in the resolve route lets an unauthenticated visitor read file contents of private model, code and space repositories belonging to other users and organizations. The exposed files can include source code, configuration, data files and committed secrets.Source: github.com
Am I affected, and how do I check?
Versions through v2.6.0-ce of the OpenCSG portal (OpenCSGs/csghub) together with OpenCSGs/csghub-server v2.6.0-ce. Datasets are not affected. To check, compare the installed portal and csghub-server versions against v2.6.0-ce.Source: github.com
What should I do about it?
The checked facts name no fixed version, so no upgrade target can be given. Check the OpenCSG advisory or project releases for a build later than v2.6.0-ce.Source: github.com
Is it being exploited?
It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.Source: cve.now feed data
What if there's no patch?
The checked facts contain no workaround or mitigation, so none can be recommended here. The OpenCSG advisory should be consulted for any interim step.Source: github.com