Threats Tagged 'ghsa-rh62-j648-g5qc'
View all threats tagged with 'ghsa-rh62-j648-g5qc'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-rh62-j648-g5qc'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-rh62-j648-g5qc: Recce server has unauthenticated SQL execution that allows local file read/write through DuckDBCVE-2026-49360 0 Recce OSS server versions prior to 1.50.0 that expose the server to untrusted networks without authentication are vulnerable to unauthenticated SQL execution via the query run API. When configured with a DuckDB-backed project, this allows attackers to read and write local files accessible to the Recce server process. The impact includes potential disclosure and tampering of local files, modification of static files served by the browser leading to stored XSS, and alteration of application files if writable. If run as root, these file operations occur with root privileges. The vulnerability has been patched in Recce version 1.50.0. Join the discussion | GCVE Database | 07/02/2026, 21:14:38 UTC Added: 07/02/2026, 22:56:45 UTC |
Showing 1 to 1 of 1 result