TI-2026-67536 CVE-2026-105148 · GHSA-2j4q-255p-4658
SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
Priority HIGH 70
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6.
Vulnerabilities
5 records
TI-2026-67535 CVE-2026-105147 · GHSA-hw45-xf9v-jg9c
SciPhi-AI R2R JWT Secret hard-coded credentials
Priority HIGH 70
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6.
TI-2026-56889 CVE-2026-82527 · GHSA-j3pv-p6h2-grgg
R2R 3.6.6 SQL Injection via Retrieval Search Filter Key
Priority HIGH 77
R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks search query by manipulating the filter key parameter in the retrieval search endpoi…
TI-2026-56888 CVE-2026-82526 · GHSA-cwgr-jpvr-x8r5
R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
Priority HIGH 81
R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint.
TI-2026-56736 CVE-2026-82271 · GHSA-w8h6-f7c2-3rhj
R2R Missing Ownership Check Allows Modifying Other Users' Conversations
Priority HIGH 66
R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations.