Vendor

    SciPhi-AI

    5 known vulnerabilities in products by SciPhi-AI, 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SciPhi-AI
    CriticalCVE-2026-82526

    R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

    		9.8
    HighCVE-2026-82527

    R2R 3.6.6 SQL Injection via Retrieval Search Filter Key

    		7.5
    HighCVE-2026-105148

    SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery

    		7.3
    HighCVE-2026-105147

    SciPhi-AI R2R JWT Secret hard-coded credentials

    		7.3
    HighCVE-2026-82271

    R2R Missing Ownership Check Allows Modifying Other Users' Conversations

    		6.5

    Products

    Products by SciPhi-AI
    SciPhi-AI R2R50