PT-2026-47243

CVE-2026-11481

Published

2026-06-08

Updated

2026-09-04

Description by

CVSS 3.1

2.5

Low

MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions yoanbernabeu grepai versions prior to 0.35.0

Description The Postgres Embedding Cache component contains an issue where the PostgresStore.LookupByContentHash() function in the indexer/chunker.go file uses a weak hash. A local attacker can manipulate the content hash argument to exploit this. The attack is characterized by high complexity and is difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-328: Use of Weak Hash

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Related identifiers

CVE-2026-11481