Advisories · Technology
SciPhi-AI R2R.
Every CVE that names SciPhi-AI R2R among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
- SciPhi-AI R2R
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
SciPhi-AI R2R JWT Secret hard-coded credentials
- SciPhi-AI R2R
- Hard-coded credentials
- CVSS 8.7 High
R2R 3.6.6 SQL Injection via Retrieval Search Filter Key
- SciPhi-AI R2R
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
- SciPhi-AI R2R
- SQL injection
- CVSS 7.1 High
R2R Missing Ownership Check Allows Modifying Other Users' Conversations
- SciPhi-AI R2R
- Broken access control