Skip to content
SSciPhi-AI
Products
| Product | CVEs | Exploited | Latest |
|---|
| R2R | 5 | – | Oct 4, 2026 |
Exploited and recent CVEs
-
CVE-2026-105148
High 7.3
SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
0.3%
-
CVE-2026-105147
High 7.3
SciPhi-AI R2R JWT Secret hard-coded credentials
0.3%
-
CVE-2026-82527
High 7.5
R2R 3.6.6 SQL Injection via Retrieval Search Filter Key
0.5%
-
CVE-2026-82526
Critical 9.8
R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
0.7%
-
CVE-2026-82271
Medium 6.5
R2R Missing Ownership Check Allows Modifying Other Users' Conversations
0.4%