PT-2026-5126 · Rethinkdb · Rethinkdb

59Lab · Published 2026-01-28 · Updated 2026-01-28 · CVE-2026-1520

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions rethinkdb versions up to 2.4.3

Description A flaw exists in rethinkdb, specifically within the Secondary Index Handler component. This issue can be exploited remotely to trigger cross site scripting. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations Update to a version beyond 2.4.3.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-1520

Affected Products

Rethinkdb

References · 8

• 🔥 https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md#poc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1520 · Security Note
• https://vuldb.com/?ctiid.343191 · Note
• https://vuldb.com/?id.343191 · Note
• https://twitter.com/CVEnew/status/2016524857005969612 · Twitter Post
• https://t.me/CVEtracker/43158 · Telegram Post
• https://github.com/59lab/dbdb/blob/main/There%20is%20a%20cross-site%20scripting(XSS)%20vulnerability%20in%20the%20rethinkdb%20database.md · Note
• https://vuldb.com/?submit.738312 · Note