CVE-2026-11466 json
zilliztech deep-searcher collection_router.py CollectionRouter.invoke access control
published 2026-06-07 5 mo ago modified 2026-08-04 3 mo ago also GHSA-43px-gpwc-q84v , PYSEC-2026-3567 , EUVD-2026-34997
- cvss
- 5.4
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 16%
- public exploits
- 0
- none known
Summary
A weakness has been identified in zilliztech deep-searcher up to 0.0.2. This affects the function CollectionRouter.invoke of the file deepsearcher/agent/collection_router.py. This manipulation of the argument kwargs causes improper access controls. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
Patch / fix
- github.com/zilliztech/deep-searcher#268 pull request
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.25% chance of exploitation in the next 30 days, higher than 16% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/zilliztech/deep-searcher/issues/267 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 5.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:P/RL:X/RC:R |
| CNA | 3.0 | 5.4 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:P/RL:X/RC:R |
| CNA | 2.0 | 5.5 | AV:N/AC:L/Au:S/C:P/I:N/A:P/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 2.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L |
| CNA | 2.0 | 5.5 | AV:N/AC:L/Au:S/C:P/I:N/A:P |
| GitHub | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L |
| OSV | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | deepsearcher | <=0.0.2 |
no fix listed |
Affected products
- zilliztech deep-searcher
Classification
References
-
github.com
/zilliztech/deep-searcher/pull/268
issue-tracking, patch, web
-
github.com
/zilliztech/deep-searcher/issues/267
exploit, issue-tracking, web
-
vuldb.com
/vuln/369086
vdb-entry, technical-description, web
-
vuldb.com
/vuln/369086/cti
signature, permissions-required, web
-
vuldb.com
/cve/CVE-2026-11466
third-party-advisory, web
-
vuldb.com
/submit/833652
third-party-advisory, web
-
github.com
/zilliztech/deep-searcher/
product
-
nvd.nist.gov
/vuln/detail/CVE-2026-11466
advisory
-
github.com
/zilliztech/deep-searcher
package
-
pypi.org
/project/deepsearcher
package
-
github.com
/advisories/GHSA-43px-gpwc-q84v
advisory
Sources
- CVE List CVE-2026-11466
- GitHub Advisory GHSA-43px-gpwc-q84v
- NVD CVE-2026-11466
- OSV PYSEC-2026-3567
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.