Vulnerability · Published Sep 16, 2026 · Assigned by VulnCheck

CVE-2026-92570reNgine through 2.2.0 Unauthorized Configuration File Read

Medium 6.5

In plain English

A medium-severity missing authorization in rengine from yogeshojha. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 61.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like SecurityTrails, Shodan, Censys, VirusTotal, BinaryEdge and Hunter by querying the endpoint without role-based permission checks.

Affected products (as reported)

Vendor	Product	Versions
yogeshojha	rengine	0 – through 2.2.0

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

GitHub Issue #1554 issue-tracking
https://github.com/yogeshojha/rengine product
https://github.com/yogeshojha/rengine/blob/302b5f32e7aa5958fec9e405772f4aa069eb21a2/web/api/views.py#L1607-L1700 technical-description
https://github.com/yogeshojha/rengine/blob/302b5f32e7aa5958fec9e405772f4aa069eb21a2/web/reNgine/settings.py#L129-L141 technical-description
VulnCheck Advisory: reNgine through 2.2.0 Unauthorized Configuration File Read third-party-advisory