CVE-2026-13483
published 2026-06-28CVE-2026-13483: A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the file application/security/encryption.py of…
PriorityP415low3.1CVSS 3.1
AVNACHPRLUINSUCNILAN
EPSS
0.10%
0.8th percentile
A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
| arc53 | docsgpt | — | — |
CVSS provenance
nvdv3.13.1LOWCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
nvdv4.01.3LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.02.1LOWAV:N/AC:H/Au:S/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A flaw has been found in arc53 DocsGPT up to 0.18.0.
ghsa_unreviewed·2026-06-28
CVE-2026-13483 [LOW] CWE-345 A flaw has been found in arc53 DocsGPT up to 0.18.0.
A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
VulDB
arc53 DocsGPT up to 0.18.0 Credential Storage encryption.py encrypt_credentials data authenticity (Issue 2503)
vuldb·2026-06-27
CVE-2026-13483 [LOW] arc53 DocsGPT up to 0.18.0 Credential Storage encryption.py encrypt_credentials data authenticity (Issue 2503)
A vulnerability was found in arc53 DocsGPT up to 0.18.0. It has been rated as problematic. The affected element is the function encrypt_credentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity.
The identification of this vulnerability is CVE-2026-13483. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
The pull request to fix this issue awaits acceptance.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-28
Published