Read the docs
TI-2026-76441 Aliases CVE-2026-111935GHSA-4fc4-j7c3-c9rg

NoteGen Local File Disclosure via Chat Image Analysis

Priority LOW 11CWE-73Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Passive
Attack complexity
High
Attack requirements
Present
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-73 and the CVSS impact.

Summary

NoteGen through 0.38.3 contains an external control of file path flaw (CWE-73) in its chat image analysis. The image_inspect feature does not validate synced sourceUrl paths, so it can read local image files. An attacker with write access to the victim's sync target can plant absolute paths or file:// URLs, causing local images to be sent to the AI provider. Exploitation is not reported as known, and the CVSS 4.0 base score is 2.1 (LOW).

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00252 16th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
codexuNoteGenup to 0.38.3—No fix listedCNA
  • NoteGen Vendorcodexu Affected up to 0.38.3 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for NoteGen.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Timeline

  1. 2026-10-19 Threatist record created from CVE-2026-111935
  2. 2026-10-19 Alias added: GHSA-4fc4-j7c3-c9rg
  3. 2026-10-20 CISA SSVC decision points changed

References

Patch 2

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences