CVE-2026-11481

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

• CWE-327
• CWE-328

• https://github.com/yoanbernabeu/grepai/
• https://github.com/yoanbernabeu/grepai/issues/249
• https://github.com/yoanbernabeu/grepai/pull/250
• https://vuldb.com/cve/CVE-2026-11481
• https://vuldb.com/submit/833997
• https://vuldb.com/vuln/369101
• https://vuldb.com/vuln/369101/cti

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11476A security vulnerability has been detected in Kushan2k stude…6.3
• CVE-2026-11477A vulnerability was detected in hs-web hsweb-framework up to…4.3
• CVE-2026-11478A flaw has been found in kokke tiny-regex-c up to f2632c6d9e…3.3
• CVE-2026-11479A vulnerability has been found in yoanbernabeu grepai 0.35.0…4.2
• CVE-2026-1148A vulnerability was determined in SourceCodester/Patrick Mvu…6.5
• CVE-2026-11480A vulnerability was found in Chengdu Everbrite Network Techn…6.3
• CVE-2026-11482A vulnerability was identified in SourceCodester Class and E…7.3
• CVE-2026-11483A security flaw has been discovered in SourceCodester Class …7.3
• CVE-2026-11484A weakness has been identified in SourceCodester Class and E…7.3
• CVE-2026-11485A security vulnerability has been detected in SourceCodester…7.3
• CVE-2026-11486A vulnerability was detected in SourceCodester Class and Exa…7.3
• CVE-2026-11487A flaw has been found in Neovim up to 0.12.2. Affected by th…5.3