Threats affecting pkg:github/CSGHub

OpenCSG CSGHub up to version 2.6.0-ce has an authorization bypass vulnerability in an unauthenticated file resolve route. This flaw allows remote attackers to read files from private repositories by injecting a specially crafted percent-encoded current_user parameter into the file path. The portal forwards this parameter along with its server API key, enabling unauthorized access to private model, code, or space repository files.