yoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash
CVE-2026-11481

2LOW

Key Information:

Vendor: Yoanbernabeu
Status: Grepai
Vendor: CVE Published:; 8 June 2026

🔔 Create Yoanbernabeu Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-11481?

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

Affected Version(s)

grepai 0.1

grepai 0.2

grepai 0.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-11481 - Proof of Concept