CVE-2026-18852

Description

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual conditions. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Overview

State: PUBLISHED
Assigner (CNA): VulDB
CVSS severity: MEDIUM
CVSS score: 4.8 / 10
CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Effective score: 4.8 / 10 MEDIUM source: CNA overview
CWE(s): CWE-754
Reserved: 2026-08-04
Published: 2026-08-04 23:15 UTC
Last updated: 2026-08-04 23:15 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/18xxx/CVE-2026-18852.json

Affected products (1)

Vendor	Product	Versions	Platforms
epsilla-cloud	vectordb	`0.3.0` (affected), `0.3.1` (affected), `0.3.2` (affected), `0.3.3` (affected), `0.3.4` (affected), `0.3.5` (affected), `0.3.6` (affected), `0.3.7` (affected), `0.3.8` (affected), `0.3.9` (affected), `0.3.10` (affected), `0.3.11` (affected), `0.3.12` (affected), `0.3.13` (affected), `0.3.14` (affected), `0.3.15` (affected), `0.3.16` (affected), `0.3.17` (affected), `0.3.18` (affected), `df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a` (affected)	—

Vendor references (6)

References embedded in the original CVE record by the assigning CNA.

VDB-385857 | epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition vdb-entrytechnical-description
VDB-385857 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
CVE-2026-18852 | CVE Analysis and Report third-party-advisory
Submit #858196 | epsilla-cloud VectorDB df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a CWE-754: Improper Check for Unusual or Exceptional Conditions third-party-advisory
https://github.com/fa1c4/security-advisories/tree/main/VectorDB related
https://github.com/fa1c4/security-advisories/tree/main/VectorDB/PoC exploit

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-18852.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:epsilla-cloud:vectordb:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Filter Parser"
          ],
          "product": "vectordb",
          "vendor": "epsilla-cloud",
          "versions": [
            {
              "status": "affected",
              "version": "0.3.0"
            },
            {
              "status": "affected",
              "version": "0.3.1"
            },
            {
              "status": "affected",
              "version": "0.3.2"
            },
            {
              "status": "affected",
              "version": "0.3.3"
            },
            {
              "status": "affected",
              "version": "0.3.4"
            },
            {
              "status": "affected",
              "version": "0.3.5"
            },
            {
              "status": "affected",
              "version": "0.3.6"
            },
            {
              "status": "affected",
              "version": "0.3.7"
            },
            {
              "status": "affected",
              "version": "0.3.8"
            },
            {
              "status": "affected",
              "version": "0.3.9"
            },
            {
              "status": "affected",
              "version": "0.3.10"
            },
            {
              "status": "affected",
              "version": "0.3.11"
            },
            {
              "status": "affected",
              "version": "0.3.12"
            },
            {
              "status": "affected",
              "version": "0.3.13"
            },
            {
              "status": "affected",
              "version": "0.3.14"
            },
            {
              "status": "affected",
              "version": "0.3.15"
            },
            {
              "status": "affected",
              "version": "0.3.16"
            },
            {
              "status": "affected",
              "version": "0.3.17"
            },
            {
              "status": "affected",
              "version": "0.3.18"
            },
            {
              "status": "affected",
              "version": "df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "fa1c4 (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual conditions. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "Improper Check for Unusual Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-04T23:15:10.086Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-385857 | epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/385857"
        },
        {
          "name": "VDB-385857 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/385857/cti"
        },
        {
          "name": "CVE-2026-18852 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-18852"
        },
        {
          "name": "Submit #858196 | epsilla-cloud VectorDB df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a CWE-754: Improper Check for Unusual or Exceptional Conditions",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/858196"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/fa1c4/security-advisories/tree/main/VectorDB"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/fa1c4/security-advisories/tree/main/VectorDB/PoC"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-04T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-08-04T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-08-04T17:54:34.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition",
      "x_generator": [
        "VulDB PVTS v202608"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-18852",
    "datePublished": "2026-08-04T23:15:10.086Z",
    "dateReserved": "2026-08-04T15:49:29.645Z",
    "dateUpdated": "2026-08-04T23:15:10.086Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}