CVE-2026-11481

2.5 LOW

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0

Published: 2026-06-08 · Last updated: 2026-06-08

Severity and scoring

CVSS: 2.5 LOW
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE: CWE-327, CWE-328

Description

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-11481
[Other]https://github.com/yoanbernabeu/grepai/
[Other]https://github.com/yoanbernabeu/grepai/issues/249
[Other]https://github.com/yoanbernabeu/grepai/pull/250
[Other]https://vuldb.com/cve/CVE-2026-11481
[Other]https://vuldb.com/submit/833997
[Other]https://vuldb.com/vuln/369101
[Other]https://vuldb.com/vuln/369101/cti

Related CVEs

Same CWE

CVE-2026-48488 — phpMyFAQ is an open source FAQ web application
CVE-2026-11479 — A vulnerability has been found in yoanbernabeu grepai 0.35.0 (4.2 MEDIUM)
CVE-2026-46395 — HAX CMS helps manage microsite universe with PHP or NodeJs backends
CVE-2026-11330 — A weakness has been identified in thedotmack claude-mem up to 11.0.1 (3.6 LOW)
CVE-2026-11329 — A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0 (3.6 LOW)