OpenCSG vulnerabilities
We track 1 vulnerability in OpenCSG products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest OpenCSG vulnerabilities
- 7.5 High severity
CSGHub: Authorization Bypass Through User-Controlled Key
OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded current_user parameter into the file