CVE-2026-58449 Details

A remote code execution vulnerability has been identified in txtai versions through 9.10.0. The issue arises in the API's /reindex endpoint, where the function body parameter is processed by txtai.util.Resolver. This resolver executes __import__ and getattr on user-supplied dotted paths without any allowlist. The vulnerability is exploitable when the API is active, no TOKEN is set (making authentication optional), and the index is writable. Under these conditions, an attacker can manipulate the function parameter to execute arbitrary callables, such as subprocess.getoutput, leading to remote code execution as the server process during the reindexing operation. This vulnerability does not exist in the default configuration, as the reindexing feature is typically disabled.

Users can update to txtai version 9.11.0 or later, where this vulnerability has been addressed by adding a reindex configuration flag that disables the endpoint by default.