OpenCSG CSGHub lets outsiders read private repository files

Private files on an AI model hosting site can be peeked at without logging in.

Summary

An authorization bypass in CSGHub's unauthenticated file resolve route lets remote attackers read files in private model, code and Space repositories. Versions through v2.6.0-ce are affected.

What to do

Check that you run a version newer than v2.6.0-ce, and read the vendor's release notice. No fixed version is named in the sources.

Products and platforms

OpenCSG CSGHub

CVE IDs

CVE-2026-120426 (opens in a new tab)

Sources

Advisory: github.com (opens in a new tab)
Write-up: github.com (opens in a new tab) · github.com (opens in a new tab) · github.com (opens in a new tab) · github.com (opens in a new tab) · hackmd.io (opens in a new tab) · vulncheck.com (opens in a new tab)
CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-02 14:28 UTC

First seen 2026-11-09 14:10 UTC