CVE-2026-13483: arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity
A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13483?
The severity of CVE-2026-13483 is rated as low.
What vulnerability does CVE-2026-13483 describe?
CVE-2026-13483 describes a flaw in arc53 DocsGPT that leads to insufficient verification of data authenticity in the encrypt_credentials function.
How do I fix CVE-2026-13483?
To fix CVE-2026-13483, update arc53 DocsGPT to the latest version that addresses the vulnerability.
What impact does CVE-2026-13483 have on data security?
CVE-2026-13483 can potentially compromise the authenticity of sensitive data stored in Credential Storage.
Is CVE-2026-13483 exploitable remotely?
Yes, CVE-2026-13483 is classified with an Attack Vector of Network, indicating it can be exploited remotely.