CVE-2026-111363 | dataelement Bisheng up to 3.0.0-beta4 Knowledge Base file_bbox file_id resource injection

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in dataelement Bisheng up to 3.0.0-beta4. This affects an unknown function of the file /api/v1/knowledge/file_bbox of the component Knowledge Base. The manipulation of the argument file_id leads to improper control of resource identifiers.

This vulnerability is traded as CVE-2026-111363. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More