OpenCSG CSGHub up to 2.6.0-ce File Resolve current_user authorization

Summaryinfo

A vulnerability was found in OpenCSG CSGHub up to 2.6.0-ce. It has been rated as problematic. Affected is an unknown function of the component File Resolve. This manipulation of the argument current_user causes authorization. This vulnerability is registered as CVE-2026-120426. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability has been found in OpenCSG CSGHub up to 2.6.0-ce and classified as problematic. Affected by this vulnerability is an unknown function of the component File Resolve. The manipulation of the argument current_user with an unknown input leads to a authorization vulnerability. The CWE definition for the vulnerability is CWE-639. The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. As an impact it is known to affect confidentiality. The summary by CVE is:

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded current_user parameter into the file path, which the portal forwards with its server API key, to read files in private model, code or space repositories.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2026-120426 since 11/02/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/02/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• OpenCSG

Name

• CSGHub

Version

• 2.6.0-ce

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion