CVE-2026-119710

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing...

CVE-2026-119710 PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing...

CVE-2026-119710 PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing...

CVE-2026-119710

PipesHub versions 0.3.0 before 0.10.0 are vulnerable to an event type injection vulnerability in the Crawling-Manager schedule route . Authenticated users with only the crawl:write scope can delete connectors by injecting a value like web.delete into the :connector path segment. This bypasses nec...

CVE-2026-119710: pipeshub-ai: PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only…

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing...