Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-58449— txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

Quick assessment

Affected
neuml txtai
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NeuML txtai是NeuML公司开源的一个AI框架。 NeuML txtai 9.10.0及之前版本存在代码注入漏洞，该漏洞源于/reindex API中的function body参数通过txtai.util.Resolver解析，对调用者提供的点分路径执行__import__和getattr操作且无白名单限制，可能导致远程攻击者在API未配置TOKEN且索引可写时，将function设置为任意可调用对象（如subprocess.getoutput），实现远程代码执行。

CVSS 9.8 · Critical EPSS 1.35% · P71

Affected Version Matrix 2

VendorProduct Version RangeStatus
neuml txtai ≤ 9.10.0 affected
11b32da720f03276199ebc5583c15fc5d1ccafd3 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-58449

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured (authentication is opt-in, so all endpoints are unauthenticated) and the index is configured writable, a remote attacker can set function to an arbitrary callable such as subprocess.getoutput, achieving remote code execution as the server process during reindexing. Exploitation requires those deployment conditions (API exposed, no TOKEN, writable index); it is not the default configuration. The fix gates the endpoint behind a new reindex configuration flag.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Vulnerability Title
NeuML txtai 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NeuML txtai是NeuML公司开源的一个AI框架。 NeuML txtai 9.10.0及之前版本存在代码注入漏洞，该漏洞源于/reindex API中的function body参数通过txtai.util.Resolver解析，对调用者提供的点分路径执行__import__和getattr操作且无白名单限制，可能导致远程攻击者在API未配置TOKEN且索引可写时，将function设置为任意可调用对象（如subprocess.getoutput），实现远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
neuml txtai 0 ~ 9.10.0 -

II. Public POCs for CVE-2026-58449

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 9500 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-58449

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-58449 (1)

News Coverage for CVE-2026-58449 (1)

Other References for CVE-2026-58449 (1)

IV. Related Vulnerabilities

Same weakness: CWE-94

V. Comments for CVE-2026-58449

No comments yet

Leave a comment