CVE-2026-92570
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
An authorization bypass vulnerability in reNgine through 2.2.0 in the GetFileContents API endpoint allows any authenticated user to read bundled recon tool configuration files. Low-privilege Auditor roles can access files containing third-party API keys for services like SecurityTrails, Shodan, Censys, VirusTotal, BinaryEdge and Hunter.
Risk Assessment
The risk is the exposure of sensitive API keys, which could allow attackers to impersonate external services and gain unauthorized access to data, as well as compromise infrastructure security.
Recommendation
Immediately upgrade reNgine to the latest version if a patch is available, restrict access to the GetFileContents endpoint only to privileged roles, and consider rotating any API keys that may have been exposed.
Other vulnerabilities in reNgine
See all- CVE-2026-104584Unknown
reNgine up to v2.2.0 and the current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_fuzz functions).
- CVE-2026-105487Medium
A vulnerability was found in yogeshojha reNgine up to 2.2.0 in the subdomain_discovery function of web/reNgine/tasks.py within the listTargets Endpoint component. Manipulation of the Name argument results in OS command injection. The attack can be launched remotely and the exploit has been made public.
Original NVD description (English source)
reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like SecurityTrails, Shodan, Censys, VirusTotal, BinaryEdge and Hunter by querying the endpoint without role-based permission checks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS