CVE-2026-120426

OpenCSG CSGHub (through version v2.6.0-ce ) is vulnerable to an authorization bypass in the unauthenticated file resolve route. This flaw allows remote attackers to read private repository files, including model, code, or space repositories . The root cause is the ability for an attacker to injec...