Is CVE-2026-119710 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-119710?

CVE-2026-119710 has a CVSS v3 severity of HIGH (7.1).

Back

CVE-2026-119710

Description

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector value like web.delete to the schedule route, bypassing connector:delete and lock checks to remove connector instances and purge record embeddings.