Live › vulnerability › CVE-2026-120426
OpenCSG CSGHub through v2.6.0-ce has an unauthenticated file resolve route (/:repo_type/:namespace/:name/resolve/:branch/*path). With no user_token cookie the portal fetches files using its server API key, and a percent-encoded '?current_user=<owner>&' in the file path overrides the acting user, so private model, code and space files can be read. Dataset repos are not affected per the reporter.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 15:24 UTC. All times on this page are UTC.
Teams that self-host CSGHub through v2.6.0-ce and expose its portal or file resolve route to a network. The portal forwards requests with its server API key, so private repositories are readable without credentials. Installations on a later release, or not reachable from untrusted networks, are not described as affected by the sources.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| csghub | vendor | <= v2.6.0-ce | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded current_user parameter into the file path, which the portal forwards with its server API key, to read files in private model, code or space repositories.
This page as .md · .json · in your agent: get_signal("CVE-2026-120426")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.