{"id":"CVE-2026-112147","summary":"ai-genius-automations octoally index.ts information disclosure","details":"A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.0.88 is sufficient to resolve this issue. The patch is named 3898085c4e701be21377ebd9e91e10b941e47168. It is recommended to upgrade the affected component.","modified":"2026-10-21T02:52:28.682482455Z","published":"2026-10-19T14:15:16.138Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-200","CWE-284"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112147.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112147.json"},{"type":"WEB","url":"https://github.com/ai-genius-automations/octoally/"},{"type":"FIX","url":"https://github.com/ai-genius-automations/octoally/commit/3898085c4e701be21377ebd9e91e10b941e47168"},{"type":"REPORT","url":"https://github.com/ai-genius-automations/octoally/issues/24"},{"type":"FIX","url":"https://github.com/ai-genius-automations/octoally/releases/tag/v1.0.88"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112147"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-112147"},{"type":"ADVISORY","url":"https://vuldb.com/submit/1013490"},{"type":"ADVISORY","url":"https://vuldb.com/submit/1013491"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/422254"},{"type":"REPORT","url":"https://vuldb.com/vuln/422254/cti"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ai-genius-automations/octoally","events":[{"introduced":"30ca530333d675c06600a5be8aae8f4278eceaee"},{"last_affected":"47ca9cb03a159a2d5722fa038ce9fcee1195be43"},{"fixed":"3898085c4e701be21377ebd9e91e10b941e47168"},{"fixed":"79e047142c1cccfc84a463d7a56366c67ffb0e7c"}],"database_specific":{"extracted_events":[{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.1"},{"last_affected":"1.0.1"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.2"},{"last_affected":"1.0.2"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.3"},{"last_affected":"1.0.3"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.4"},{"last_affected":"1.0.4"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.5"},{"last_affected":"1.0.5"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.6"},{"last_affected":"1.0.6"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.7"},{"last_affected":"1.0.7"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.8"},{"last_affected":"1.0.8"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.9"},{"last_affected":"1.0.9"}]},{"range":[{"introduced":"1.0.10"},{"last_affected":"1.0.10"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.11"},{"last_affected":"1.0.11"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.12"},{"last_affected":"1.0.12"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.13"},{"last_affected":"1.0.13"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.14"},{"last_affected":"1.0.14"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.15"},{"last_affected":"1.0.15"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.16"},{"last_affected":"1.0.16"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.17"},{"last_affected":"1.0.17"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.18"},{"last_affected":"1.0.18"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.19"},{"last_affected":"1.0.19"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.20"},{"last_affected":"1.0.20"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.21"},{"last_affected":"1.0.21"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.22"},{"last_affected":"1.0.22"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.23"},{"last_affected":"1.0.23"}]},{"range":[{"introduced":"1.0.24"},{"last_affected":"1.0.24"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.25"},{"last_affected":"1.0.25"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.26"},{"last_affected":"1.0.26"}]},{"range":[{"introduced":"1.0.27"},{"last_affected":"1.0.27"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.28"},{"last_affected":"1.0.28"}]},{"range":[{"introduced":"1.0.29"},{"last_affected":"1.0.29"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.30"},{"last_affected":"1.0.30"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.31"},{"last_affected":"1.0.31"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.32"},{"last_affected":"1.0.32"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.33"},{"last_affected":"1.0.33"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.34"},{"last_affected":"1.0.34"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.35"},{"last_affected":"1.0.35"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.36"},{"last_affected":"1.0.36"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.37"},{"last_affected":"1.0.37"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.38"},{"last_affected":"1.0.38"}],"source":"AFFECTED_FIELD"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.39"},{"last_affected":"1.0.39"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.40"},{"last_affected":"1.0.40"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.41"},{"last_affected":"1.0.41"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.42"},{"last_affected":"1.0.42"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.43"},{"last_affected":"1.0.43"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.44"},{"last_affected":"1.0.44"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.45"},{"last_affected":"1.0.45"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.46"},{"last_affected":"1.0.46"}]},{"range":[{"introduced":"1.0.47"},{"last_affected":"1.0.47"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.48"},{"last_affected":"1.0.48"}]},{"range":[{"introduced":"1.0.49"},{"last_affected":"1.0.49"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.50"},{"last_affected":"1.0.50"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.51"},{"last_affected":"1.0.51"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.52"},{"last_affected":"1.0.52"}]},{"range":[{"introduced":"1.0.53"},{"last_affected":"1.0.53"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.54"},{"last_affected":"1.0.54"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.55"},{"last_affected":"1.0.55"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.56"},{"last_affected":"1.0.56"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.57"},{"last_affected":"1.0.57"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.58"},{"last_affected":"1.0.58"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.59"},{"last_affected":"1.0.59"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.60"},{"last_affected":"1.0.60"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.61"},{"last_affected":"1.0.61"}]},{"range":[{"introduced":"1.0.62"},{"last_affected":"1.0.62"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.63"},{"last_affected":"1.0.63"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.64"},{"last_affected":"1.0.64"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.65"},{"last_affected":"1.0.65"}]},{"range":[{"introduced":"1.0.66"},{"last_affected":"1.0.66"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.67"},{"last_affected":"1.0.67"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.68"},{"last_affected":"1.0.68"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.69"},{"last_affected":"1.0.69"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.70"},{"last_affected":"1.0.70"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.71"},{"last_affected":"1.0.71"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.72"},{"last_affected":"1.0.72"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.73"},{"last_affected":"1.0.73"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.74"},{"last_affected":"1.0.74"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.75"},{"last_affected":"1.0.75"}]},{"range":[{"introduced":"1.0.76"},{"last_affected":"1.0.76"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.77"},{"last_affected":"1.0.77"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.78"},{"last_affected":"1.0.78"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.79"},{"last_affected":"1.0.79"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.80"},{"last_affected":"1.0.80"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.81"},{"last_affected":"1.0.81"}]},{"range":[{"introduced":"1.0.82"},{"last_affected":"1.0.82"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.83"},{"last_affected":"1.0.83"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.84"},{"last_affected":"1.0.84"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.85"},{"last_affected":"1.0.85"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.86"},{"last_affected":"1.0.86"}]},{"range":[{"introduced":"1.0.87"},{"last_affected":"1.0.87"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"3898085c4e701be21377ebd9e91e10b941e47168"}]},{"original_tag":"v1.0.88","range":[{"fixed":"79e047142c1cccfc84a463d7a56366c67ffb0e7c"}],"source":"REFERENCES_TAG"}]}}],"versions":["1.0.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.2","1.0.20","1.0.21","1.0.22","1.0.23","1.0.24","1.0.25","1.0.26","1.0.27","1.0.28","1.0.29","1.0.3","1.0.30","1.0.31","1.0.32","1.0.33","1.0.34","1.0.35","1.0.36","1.0.37","1.0.38","1.0.39","1.0.4","1.0.40","1.0.41","1.0.42","1.0.43","1.0.44","1.0.45","1.0.46","1.0.47","1.0.48","1.0.49","1.0.5","1.0.50","1.0.51","1.0.52","1.0.53","1.0.54","1.0.55","1.0.56","1.0.57","1.0.58","1.0.59","1.0.6","1.0.60","1.0.61","1.0.62","1.0.63","1.0.64","1.0.65","1.0.66","1.0.67","1.0.68","1.0.69","1.0.7","1.0.70","1.0.71","1.0.72","1.0.73","1.0.74","1.0.75","1.0.76","1.0.77","1.0.78","1.0.79","1.0.8","1.0.80","1.0.81","1.0.82","1.0.83","1.0.84","1.0.85","1.0.86","1.0.87","1.0.9","v1.0.87","v1.0.86","v1.0.85","v1.0.84","v1.0.83","v1.0.82","v1.0.81","v1.0.80","v1.0.79","v1.0.78","v1.0.77","v1.0.76","v1.0.75","v1.0.74","v1.0.73","v1.0.72","v1.0.71","v1.0.70","v1.0.69","v1.0.68","v1.0.67","v1.0.66","v1.0.65","v1.0.64","v1.0.63","v1.0.62","v1.0.61","v1.0.60","v1.0.59","v1.0.58","v1.0.57","v1.0.56","v1.0.55","v1.0.54","v1.0.53","v1.0.52","v1.0.51","v1.0.50","v1.0.49","vnpm","v1.0.48","v1.0.47","v1.0.46","v1.0.45","v1.0.44","v1.0.43","v1.0.42","v1.0.41","v1.0.40","v1.0.39","v1.0.38","v1.0.37","v1.0.36","v1.0.35","v1.0.34","v1.0.33","v1.0.32","v1.0.31","v1.0.30","v1.0.29","v1.0.28","v1.0.27","v1.0.26","v1.0.25","v1.0.24","v1.0.23","v1.0.22","v1.0.21","v1.0.20","v1.0.19","v1.0.18","v1.0.17","v1.0.16","v1.0.15","v1.0.14","v1.0.13","v1.0.12","v1.0.11","v1.0.10","v1.0.9","v1.0.8","v1.0.7","v1.0.6","v1.0.5","v1.0.4","v1.0.3","v1.0.2","v1.0.1","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112147.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}]}