CVE Catalog
CVE-2026-65582
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk0.42%
35th percentile - higher than 35% of all known CVEs
Summary
The AI Hub plugin versions up to 1.3.10 allow a subscriber-level user to download arbitrary files from the server.
Risk Assessment
An attacker could access sensitive files such as configuration files or user data, potentially leading to data leakage.
Recommendation
Update the AI Hub plugin to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.