TI-2026-75404 CVE-2026-111618 · GHSA-r2h8-g3f5-9cw2Path traversal in CoAI archive download endpointsPriority HIGH 70CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter.CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0043 · Published 2026-10-16 · No fix listed CWE-22