CVE-2026-120426

CSGHub resolve route can impersonate private-repository readers

OpenCSG · CSGHub portal and backend

First documented disclosure · Review checkpoint

Summary

An anonymous file request can inherit the portal’s privileged backend identity.

Severity and exploitation evidence

High · 8.7/10 · CVSS 4.0. Severity source.

Exploitation not established: Static source analysis only; no live deployment was contacted and malicious exploitation is not established.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Unescaped path data injects current_user into a request sent with the server API key.

Conditions required

An affected portal/backend pair, reachable resolve route, repository/file identifiers and an owner or authorized-member name.

Potential impact

Read access to private model, code or space files. The reviewed path excludes datasets; no write or code-execution claim.

Affected versions and configurations

CNA: through v2.6.0-ce; research reviewed both portal and backend at that tag.

Fix and mitigation status

No fixed release verified; maintainer review remains open.

Practical next steps

Restrict anonymous resolve access pending a fix; bind reads to verified user credentials and encode paths and queries separately.

Operating lesson

A service credential must not turn client-controlled identity text into authorization.

Evidence and limits

Public issue October 31; CVE November 2. On November 1 the maintainer said it could neither confirm nor deny the finding while reviewing it. Latest release remains 2.6.0-ce; unrelated security fixes in those notes are not this fix.

Sources