SciPhi-AI vulnerabilities
5 published CVEs name SciPhi-AI among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105148
SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
SciPhi-AI · R2R
Medium6.9 - CVE-2026-105147
SciPhi-AI R2R JWT Secret hard-coded credentials
SciPhi-AI · R2R
Medium6.9 - CVE-2026-82527
R2R 3.6.6 SQL Injection via Retrieval Search Filter Key
SciPhi-AI · R2R
High8.7 - CVE-2026-82526
R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
SciPhi-AI · R2R
Critical9.3 - CVE-2026-82271
R2R Missing Ownership Check Allows Modifying Other Users' Conversations
SciPhi-AI · R2R
High7.1