What’s Vulnerable › Products

SciPhi-AI R2R vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your SciPhi-AI R2R version is affected

Latest SciPhi-AI R2R vulnerabilities

• CVE-2026-105148 — SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery (CVSS 7.3)
• CVE-2026-105147 — SciPhi-AI R2R JWT Secret hard-coded credentials (CVSS 7.3)
• CVE-2026-82527 — R2R 3.6.6 SQL Injection via Retrieval Search Filter Key (CVSS 7.5)
• CVE-2026-82526 — R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint (CVSS 9.8)
• CVE-2026-82271 — R2R Missing Ownership Check Allows Modifying Other Users' Conversations (CVSS 6.5)