What is CVE-2026-120426 in OpenCSG CSGHub?
CVE-2026-120426 is a high-severity security flaw affecting OpenCSG CSGHub up to version v2.6.0-ce, carrying a CVSS score of 7.5 (vulnerabilidad crítica CVE-2026-115905).
The issue resides in the unauthenticated file resolve route, allowing remote unauthenticated attackers to read files from private repositories.
How does the authorization bypass happen?
The vulnerability stems from an authorization bypass where malicious actors can inject a percent-encoded current_user parameter into the target file path.
The portal incorrectly forwards this parameter along with its server API key, granting unauthorized access to private model, code, or space repositories (CVE-2026-58946).
Technical details can be examined directly in the repository via Referencia técnica en github.com to understand how the middleware handles requests.
Who is affected by this security flaw?
Any organization or developer running OpenCSG CSGHub through version v2.6.0-ce without proper isolation or updates is immediately exposed to potential data leaks ().
Private repository contents, including proprietary models and codebases, can be targeted remotely without valid credentials.
How do I protect my installation?
System administrators must take immediate defensive actions to secure their deployments against unauthorized data extraction.
Review official repository updates and track for official patches.
- Audit your current OpenCSG CSGHub deployments to verify if version v2.6.0-ce or earlier is active.
- Restrict network access to the unauthenticated file resolve routes using a reverse proxy or web application firewall.
- Apply the latest patches or updates provided in the releases page.