BidingCC/BuildingAI

BidingCC/BuildingAI

GitHubGitHub
GitHubgithub.com
www.buildingai.ccwww.buildingai.cc
Releases31
Frequency1 week 2 days
Last Release
Stars1.68K
AI时代的WordPress，东半球首个积木式AI应用搭建系统，人人都可免费搭建自己的AI应用系统，例如企业智能体系统、AI漫剧系统、AI论文学术系统、AI客服系统...
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-7065↗
7.3 HIGH7.5 HIGH

A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.service.ts of the component Remote Upload API. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.