{"id":"CVE-2026-111935","summary":"NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis","details":"NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.","modified":"2026-10-21T02:55:50.348820858Z","published":"2026-10-19T13:55:09.563Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-73"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111935.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111935.json"},{"type":"PACKAGE","url":"https://github.com/codexu/note-gen"},{"type":"ARTICLE","url":"https://github.com/codexu/note-gen/blob/note-gen-v0.38.3/src/lib/chat-image-context.ts"},{"type":"ARTICLE","url":"https://github.com/codexu/note-gen/blob/note-gen-v0.38.3/src/lib/sync/conversation-sync.ts"},{"type":"FIX","url":"https://github.com/codexu/note-gen/commit/64e671eb58f56ad6ebec0d99d32f6037f9319979"},{"type":"FIX","url":"https://github.com/codexu/note-gen/commit/6840c13c4fcb71a79b7df838d19a026830d64b96"},{"type":"REPORT","url":"https://github.com/codexu/note-gen/issues/1296"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111935"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/notegen-through-0.38.3-local-file-disclosure-via-chat-image-analysis"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/codexu/note-gen","events":[{"introduced":"0"},{"last_affected":"5f81dd429107d59711ce0831add07c100e32759a"},{"fixed":"6840c13c4fcb71a79b7df838d19a026830d64b96"},{"fixed":"64e671eb58f56ad6ebec0d99d32f6037f9319979"}],"database_specific":{"extracted_events":[{"strategy":"StandardRange","range":[{"introduced":"0"},{"last_affected":"0.38.3"}],"source":"AFFECTED_FIELD"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"6840c13c4fcb71a79b7df838d19a026830d64b96"}]},{"range":[{"fixed":"64e671eb58f56ad6ebec0d99d32f6037f9319979"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["note-gen-v0.38.3","note-gen-v0.38.2","note-gen-v0.38.1","note-gen-v0.38.0","note-gen-v0.37.1","note-gen-v0.37.0","note-gen-v0.36.0","note-gen-v0.35.1","note-gen-v0.34.1","note-gen-v0.34.0","note-gen-v0.33.0","note-gen-v0.32.1","note-gen-v0.32.0","note-gen-v0.31.2","note-gen-v0.31.1","note-gen-v0.31.0","note-gen-v0.30.1","note-gen-v0.30.0","note-gen-v0.29.2","note-gen-v0.29.1","note-gen-v0.29.0","note-gen-v0.28.0","note-gen-v0.27.9","note-gen-v0.27.8","note-gen-v0.27.7","note-gen-v0.27.6","note-gen-v0.27.5","note-gen-v0.27.4","note-gen-v0.27.3","note-gen-v0.27.2","note-gen-v0.27.1","note-gen-v0.27.0","note-gen-v0.26.5","note-gen-v0.26.4","note-gen-v0.26.3","note-gen-v0.26.2","note-gen-v0.26.1","note-gen-v0.26.0","note-gen-v0.25.4","note-gen-v0.25.3","note-gen-v0.25.2","note-gen-v0.25.1","note-gen-v0.25.0","note-gen-v0.24.1","note-gen-v0.24.0","note-gen-v0.23.7","note-gen-v0.23.6","note-gen-v0.23.5","note-gen-v0.23.4","note-gen-v0.23.3","note-gen-v0.23.2","note-gen-v0.23.1","note-gen-v0.23.0","note-gen-v0.22.4","note-gen-v0.22.3","note-gen-v0.22.2","note-gen-v0.22.1","note-gen-v0.22.0","note-gen-v0.21.3","note-gen-v0.21.2","note-gen-v0.21.1","note-gen-v0.21.0","note-gen-v0.20.3","note-gen-v0.20.2","note-gen-v0.20.1","note-gen-v0.20.0","note-gen-v0.19.11","note-gen-v0.19.10","note-gen-v0.19.9","note-gen-v0.19.8","note-gen-v0.19.7","note-gen-v0.19.6","note-gen-v0.19.5","note-gen-v0.19.4","note-gen-v0.19.3","note-gen-v0.17.3","note-gen-v0.17.2","note-gen-v0.17.1","note-gen-v0.17.0","note-gen-v0.16.5","note-gen-v0.16.4","note-gen-v0.16.3","note-gen-v0.16.2","app-v0.16.1","app-v0.16.0","app-v0.15.0","app-v0.14.0","app-v0.13.7","app-v0.13.6","app-v0.13.5","app-v0.13.4","app-v0.13.3","app-v0.13.2","app-v0.13.1","app-v0.13.0","app-v0.12.4","app-v0.12.3","app-v0.12.2","app-v0.12.1","app-v0.12.0","app-v0.11.0","app-v0.10.8","app-v0.10.7","app-v0.10.6","app-v0.10.5","app-v0.10.4","app-v0.10.3","app-v0.10.2","app-v0.10.1","app-v0.10.0","app-v0.9.1","app-v0.9.0","app-v0.8.3","app-v0.8.2","app-v0.8.1","app-v0.8.0","app-v0.7.9","app-v0.7.8","app-v0.7.7","app-v0.7.6","app-v0.7.5","app-v0.7.4","app-v0.7.3","app-v0.7.2","app-v0.7.1","app-v0.7.0","app-v0.6.4","app-v0.6.3","app-v0.6.2","app-v0.6.1","app-v0.6.0","app-v0.5.20","app-v0.5.19","app-v0.5.18","app-v0.5.17","app-v0.5.11","app-v0.5.10","app-v0.5.9","app-v0.5.8","app-v0.5.7","app-v0.5.6","app-v0.5.5","app-v0.5.4","app-v0.5.3","app-v0.5.2","app-v0.5.1","app-v0.5.0","app-v0.4.4","app-v0.4.3","app-v0.4.2","app-v0.4.1","app-v0.4.0","app-v0.3.0","app-v0.2.1","app-v0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111935.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}]}