CVE-2026-66665

The Type Hub plugin versions up to 2.0.6 contain an Unauthenticated Arbitrary File Upload vulnerability. A remote unauthenticated attacker can upload malicious files to the server.

The vulnerability allows an unauthenticated attacker to upload malicious files, potentially leading to code execution or server compromise.

It is recommended to update the Type Hub plugin to a version newer than 2.0.6 to mitigate the vulnerability.