CVE-2025-67506: falha crítica em pipeshub-ai
PipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File Upload
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.8%
PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload to os.path.join(tmpdir, file.filename) without normalizing the filename. An attacker can submit a crafted filename containing ../ sequences to write arbitrary files anywhere the service account has permission, enabling remote file overwrite or planting malicious code. This issue is fixed in version 0.1.0-beta.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
pipeshub-ai · pipeshub-aiCVEs relacionadas — pipeshub-ai
No mesmo produto, das mais perigosas para as menos.
CVE-2026-119710HIGHPipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule RouteEPSS 0.4%CVE-2026-119712MEDIUMPipesHub before 0.10.0 SSRF via Image URLs in Indexed DocumentsEPSS 0.3%CVE-2026-119711MEDIUMPipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For HeaderEPSS 0.2%