CVE-2026-119710 PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing...