TI-2026-70570 CVE-2026-108582 · GHSA-29j6-3xvc-79ffGenOffice HTTP MCP file store lets local users read documentsPriority LOW 29GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents.CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.0011 · Published 2026-10-10 · No fix listed CWE-732