Arbitrary Code Injection

Overview txtai is an All-in-one open-source AI framework for semantic search, LLM orchestration and language model workflows Affected versions of this package are vulnerable to Arbitrary Code Injection via the function parameter in the /reindex API endpoint when it is resolved through the Resolve...

iflow-mcp-kb-mcp-server (0.3.0), kb-mcp-server (0.3.0) +2 more potentially affected by CVE-2026-58449 via txtai (9.2.0)

txtai PYPI version 9.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on txtai and may be impacted: - iflow-mcp-kb-mcp-server 0.3.0 - kb-mcp-server 0.3.0 - mseep-kb-mcp-server =0.3.0, =0.3.4 - quantumdrive 1.3.42 Source cves: CVE-2026-58449 Source...

CVE-2026-58449

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured...

CVE-2026-58449

txtai up to 9.10.0 is affected by an unauthenticated remote code execution via the /reindex API. The function body parameter is resolved through txtai.util.Resolver, which uses import and getattr on a user-supplied dotted path without an allowlist. If the API is exposed without a TOKEN and the in...

CVE-2026-58449 txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured...

CVE-2026-58449 txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured...

CVE-2026-58449

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured...

CVE-2026-58449 txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured...

CVE-2026-58449: Improper Control of Generation of Code

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured...

qdrant-txtai (0.11.3) potentially affected by CVE-2024-3829 via qdrant-client (0.11.3)

qdrant-client PYPI version 0.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on qdrant-client and may be impacted: - qdrant-txtai 0.11.3 Source cves: CVE-2024-3829 Source advisory: OSV:PYSEC-2026-509...

qdrant-txtai (0.10.3) potentially affected by CVE-2024-3829 via qdrant-client (0.10.3)

qdrant-client PYPI version 0.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on qdrant-client and may be impacted: - qdrant-txtai 0.10.3 Source cves: CVE-2024-3829 Source advisory: OSV:PYSEC-2026-509...

qdrant-txtai (0.11.7) potentially affected by CVE-2024-3829 via qdrant-client (0.11.7)

qdrant-client PYPI version 0.11.7 is affected by a known vulnerability. The following packages have a transitive dependency on qdrant-client and may be impacted: - qdrant-txtai 0.11.7 Source cves: CVE-2024-3829 Source advisory: OSV:PYSEC-2026-509...

qdrant-txtai (0.11.0) potentially affected by CVE-2024-3829 via qdrant-client (0.11.0)

qdrant-client PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on qdrant-client and may be impacted: - qdrant-txtai 0.11.0 Source cves: CVE-2024-3829 Source advisory: OSV:PYSEC-2026-509...

qdrant-txtai (0.11.1) potentially affected by CVE-2024-3829 via qdrant-client (0.11.1)

qdrant-client PYPI version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on qdrant-client and may be impacted: - qdrant-txtai 0.11.1 Source cves: CVE-2024-3829 Source advisory: OSV:PYSEC-2026-509...

EUVD-2025-30754

Malicious code in bioql PyPI...

CVE-2025-10854

The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhe...

CVE-2025-10854

The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhe...

UNIX Symbolic Link (Symlink) Following

Overview txtai is an All-in-one open-source AI framework for semantic search, LLM orchestration and language model workflows Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the validate function due to improper sanitization of symbolic links within the...

CVE-2025-10854

The CVE-2025-10854 issue affects the txtai framework where loading compressed tar files as embedding indices is vulnerable: the existing path traversal protection does not account for symbolic links inside the tar, allowing an attacker to write arbitrary files on the filesystem when untrusted emb...

classy-classification (0.4.4), dreamai-pdf (>=0.0.7, <=0.0.8) +5 more potentially affected by CVE-2025-10854 via txtai (>=4.6.0, <=8.5.0)

txtai PYPI version =4.6.0, =0.0.7, =0.1.0, =0.10.3, =0.1.0, =0.1.0a1, =0.1.0a3 Source cves: CVE-2025-10854 Source advisory: MEND:CVE-2025-10854...