SciPhi-AI R2R

• CVE-2026-105148 High 7.3 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery 0.3%
• CVE-2026-105147 High 7.3 SciPhi-AI R2R JWT Secret hard-coded credentials 0.3%
• CVE-2026-82527 High 7.5 R2R 3.6.6 SQL Injection via Retrieval Search Filter Key 0.5%
• CVE-2026-82526 Critical 9.8 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint 0.7%
• CVE-2026-82271 Medium 6.5 R2R Missing Ownership Check Allows Modifying Other Users' Conversations 0.4%