CVE-2026-11479
LOW
1,3
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
4,2
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: low
LOW
3,6
Source: [email protected]
Access Vector: network
Access Complexity: high
Authentication: single
Confidentiality: none
Integrity: partial
Availability: partial
Description
AI Translation Available
A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
327
Use of a Broken or Risky Cryptographic Algorithm
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Accountability
Non-Repudiation
Potential Impacts:
Read Application Data
Modify Application Data
Hide Activities
Applicable Platforms
Languages:
Not Language-Specific, Verilog, VHDL
Technologies:
Not Technology-Specific, ICS/OT
328
Use of Weak Hash
DraftCommon Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies:
ICS/OT
https://github.com/yoanbernabeu/grepai/
https://github.com/yoanbernabeu/grepai/issues/247
https://github.com/yoanbernabeu/grepai/pull/248
https://vuldb.com/cve/CVE-2026-11479
https://vuldb.com/submit/833971
https://vuldb.com/vuln/369099
https://vuldb.com/vuln/369099/cti