CVE-2026-119710 PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing...

CVE-2026-119710

PipesHub versions 0.3.0 before 0.10.0 are vulnerable to an event type injection vulnerability in the Crawling-Manager schedule route . Authenticated users with only the crawl:write scope can delete connectors by injecting a value like web.delete into the :connector path segment. This bypasses nec...