deepwiki-open CVE-2026-72602

Exploitation requires that the deepwiki-open instance is reachable over the network (typically HTTP or HTTPS on a standard web port) and that WIKI_AUTH_MODE is false - which is the documented default configuration, meaning no administrator action is required to be vulnerable. No authentication credentials, session tokens, API keys, or prior account access are needed. The attacker must reach the specific local-repository structure API endpoint via HTTP, which requires no special tooling beyond a standard HTTP client. The primary limiting factor is that this vulnerability yields directory listings only, not file contents, so the attacker obtains filesystem path enumeration rather than direct data exfiltration in a single step. Exploitation is also scoped to paths accessible by the process identity running deepwiki-open; paths outside that process's filesystem permissions will not be readable. Setting WIKI_AUTH_MODE=true entirely blocks unauthenticated access to the endpoint and is the definitive mitigation.

The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, score 7.5) accurately reflects the exploitability profile: the endpoint is network-reachable, requires no authentication, and imposes no complexity barrier, yielding high confidentiality impact through unrestricted directory enumeration. No EPSS data was provided in the intelligence feed, but the default-insecure configuration means any exposed instance is immediately vulnerable without operator error, elevating real-world exploitation probability above what a bare CVSS score implies. KEV status is absent and no POC code is referenced, confirming no public exploit has been identified at time of analysis and active exploitation has not been confirmed by CISA. That said, even a mid-sized municipal IT team in gdynia running a self-hosted deepwiki-open instance exposed to the internet should treat this as urgent given the zero-auth default and trivial attack mechanics. The C:H impact is partially mitigated by scope: this endpoint returns directory listings rather than file contents, so an attacker learns filesystem structure but cannot directly exfiltrate file data in a single request. No SSVC or EPSS data is available to supplement the assessment, and no conflicting signals exist - the CVSS vector and description are fully consistent.

An attacker scans the internet for exposed deepwiki-open instances - identifiable via HTTP response fingerprinting or banner information - and sends a single unauthenticated HTTP GET request to the local-repository structure endpoint with an absolute path parameter set to a sensitive directory such as /etc or /root. The server, running with default WIKI_AUTH_MODE=false, validates no credentials and returns a full directory listing, enabling the attacker to map the host filesystem structure, discover configuration file names, enumerate user home directories, and identify further targets for exploitation.