CSGHub vulnerabilities

1 known vulnerability in CSGHub from OpenCSG. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CSGHub: Authorization Bypass Through User-Controlled Key

  CVE-2026-120426Nov 2, 2026OpenCSG

  OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded current_user parameter into the file