Log in Start free

Vulnerability · Published Jun 28, 2026 · Assigned by VulDB

CVE-2026-13483arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity

Low 3.1

In plain English

A low-severity insufficient verification of data authenticity in DocsGPT from arc53. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low
Exploit odds (30 days)0.1%top 97.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Affected products (as reported)

VendorProductVersions
arc53 DocsGPT 0.10.20.30.40.50.60.70.8

Weakness: CWE-345 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References