Pipeshub-ai vulnerabilities
We track 2 vulnerabilities in Pipeshub-ai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Pipeshub-ai vulnerabilities
- 7.1 High severity
pipeshub-ai: Missing Authorization
PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delet
- 9.8 Critical severity
pipeshub-ai: Improper Limitation of a Pathname to a Restricted Directory
PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF