CVE-2026-90946 Details
Description
DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to read all files with supported extensions including Python, JavaScript, YAML, and JSON files containing hardcoded secrets and credentials.
A vulnerability allowing unauthenticated arbitrary file reads has been identified in DeepWiki-Open versions through d92819a. This issue resides within the '/ws/chat' WebSocket endpoint, which accepts 'repo_url' as a filesystem path without proper validation. Attackers can exploit this by providing absolute paths to access files with certain extensions, such as Python, JavaScript, YAML, and JSON. These files may contain sensitive information like hardcoded secrets and credentials. Additionally, the vulnerability allows for server-side request forgery (SSRF) by cloning Git repositories from internal hosts via the 'repo_url' parameter.
It is recommended to require authentication for the WebSocket ingestion and chat endpoints, change the default 'DEEPWIKI_AUTH_MODE' to on, and restrict the API to '127.0.0.1' by default, allowing explicit opt-in for external access. Additionally, implement a host allowlist for Git cloning operations to prevent SSRF vulnerabilities.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 14, 2026CISA-ADP
Assessed Sep 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/AsyncFuncAI/deepwiki-open/issues/536 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/AsyncFuncAI/deepwiki-open | [email protected] | Source CodeVendor |
| https://github.com/AsyncFuncAI/deepwiki-open/blob/16f35a0fc0284e99b7963bbf4e8585e9957e2fe1/api/data_pipeline.py | [email protected] | Source CodeVendor |
| https://github.com/AsyncFuncAI/deepwiki-open/blob/d92819a9c9f3b99416e3580ff235fc9d3adf8b89/api/repository.py | [email protected] | Source CodeVendor |
| https://github.com/AsyncFuncAI/deepwiki-open/issues/536 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/deepwiki-open-through-commit-d92819a-arbitrary-file-read-via-ws-chat-websocket | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AsyncFuncAI DeepWiki-Open | <= d92819a |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 14, 2026 | CVE Modified | CISA-ADP |
| Sep 14, 2026 | New CVE Received | [email protected] |