Skip to content
Threat Feed
Subscribe

Product

CSGHub (<= 2.6.0-Ce)

1 brief RSS
high advisory

OpenCSG CSGHub: Authorization bypass via file resolve route (CVE-2026-120426)

OpenCSG CSGHub version 2.6.0-ce and earlier contains an authorization bypass vulnerability allowing remote, unauthenticated attackers to retrieve private repository files by injecting a malicious current_user parameter.

CSGHub authorization-bypass web-application repository-exposure cve-2026-120426
1c