CVE-2026-108553 | OpenRefine up to 3.10.1 Get-Rows Command engine cross-site request forgery

October 10, 2026 Yanac

A vulnerability classified as problematic has been found in OpenRefine up to 3.10.1. Affected by this issue is some unknown functionality of the component Get-Rows Command. The manipulation of the argument engine leads to cross-site request forgery.

This vulnerability is traded as CVE-2026-108553. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More