CVE-2026-90946

DeepWiki-Open through commit d92819a Arbitrary File Read via /ws/chat WebSocket

Published Sep 14, 2026 CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Description

DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to read all files with supported extensions including Python, JavaScript, YAML, and JSON files containing hardcoded secrets and credentials.

Analysis

Technical impact

DeepWiki-Open includes an arbitrary file read flaw in its unauthenticated /ws/chat WebSocket endpoint. The endpoint accepts a repo_url parameter that is interpreted as a filesystem path without any containment checks, allowing an attacker to supply arbitrary directory paths. This enables reading files with supported extensions such as Python, JavaScript, YAML, and JSON, potentially exposing hard‑coded secrets and credentials. The weakness is classified under CWE‑73, indicating a path traversal or external input containment issue.

Affected Systems

The flaw affects deployments of AsyncFuncAI:deepwiki-open that contain the changes introduced by commit d92819a. Any build of the application that incorporates this commit remains vulnerable, regardless of the surrounding code version. The product is open source and typically deployed on servers that may expose the /ws/chat endpoint to external networks.

Risk and Exploitability

The CVSS score is 8.7, reflecting high severity. An EPSS score is not available, and the issue is not listed in the CISA KEV catalog. Even without an EPSS value, the vulnerability is highly exploitable because it requiresSocket connection to the exposed /ws/chat endpoint. Attacker can craft a payload with a chosen repo_url path to read sensitive files, directly compromising the confidentiality of the system.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

AsyncFuncAI

deepwiki-open

unaffected

Version	Status	Constraints
`0`	affected	≤ d92819a

No data.

Vendor Product Versions

Asyncfuncai

Deepwiki-open

Version	Status	Scheme	Platform
`[0,d92819a]`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply an updated release of DeepWiki-Open that removes or fixes the arbitrary file read logic in the /ws/chat endpoint.
If an immediate update is not feasible, restrict access to the /ws/chat endpoint so that only authenticated users can connect, effectively blocking unauthenticated file read attempts.
Configure firewall or reverse‑proxy rules to limit connections to the WebSocket endpoint to trusted IP ranges or internal networks, reducing the attack surface.

Generated by OpenCVE AI on September 15, 2026 at 13:15 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.508% probability within 30 days)

Exploitation poc

Automatable yes

Technical Impact partial

References

Link	Providers
https://github.com/AsyncFuncAI/deepwiki-open
https://github.com/AsyncFuncAI/deepwiki-open/blob/16f35a0fc0284e99b7963bbf4e8585e9957e2fe1/api/data_pipeline.py
https://github.com/AsyncFuncAI/deepwiki-open/blob/d92819a9c9f3b99416e3580ff235fc9d3adf8b89/api/repository.py
https://github.com/AsyncFuncAI/deepwiki-open/issues/536
https://www.vulncheck.com/advisories/deepwiki-open-through-commit-d92819a-arbitrary-file-read-via-ws-chat-websocket

History

Sep 15, 2026 6:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Asyncfuncai Asyncfuncai deepwiki-open
Vendors & Products		Asyncfuncai Asyncfuncai deepwiki-open

Sep 14, 2026 9:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to read all files with supported extensions including Python, JavaScript, YAML, and JSON files containing hardcoded secrets and credentials.
Title		DeepWiki-Open through commit d92819a Arbitrary File Read via /ws/chat WebSocket
Weaknesses		CWE-73
References		https://github.com/AsyncFuncAI/deepwiki-open https://github.com/AsyncFuncAI/deepwiki-open/blob/16f35a0fc0284e99b7963bbf4e8585e9957e2fe1/api/data_pipeline.py https://github.com/AsyncFuncAI/deepwiki-open/blob/d92819a9c9f3b99416e3580ff235fc9d3adf8b89/api/repository.py https://github.com/AsyncFuncAI/deepwiki-open/issues/536 https://www.vulncheck.com/advisories/deepwiki-open-through-commit-d92819a-arbitrary-file-read-via-ws-chat-websocket
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`