TI-2026-76441 CVE-2026-111935 · GHSA-4fc4-j7c3-c9rgNoteGen Local File Disclosure via Chat Image AnalysisPriority LOW 11NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths.CVSS 4.0LOW 2.1· Network · Low privileges · User interaction · EPSS 0.00252 · Published 2026-10-19 · No fix listed CWE-73