{"id":"CVE-2026-101178","kind":"vulnerability","aliases":["CVE-2026-101178"],"related":[],"title":"Autofill service module flaw may expose data confidentiality","description":"Permission control vulnerability in the autofill service module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.","summary":"A permission control weakness exists in the autofill service module, as stated in the NVD entry. Successful exploitation may affect the confidentiality of the service, meaning data it handles could be read.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["autofill","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T08:17:34+00:00","first_seen_at":"2026-11-02T08:22:13+00:00","triaged_at":"2026-11-02T08:22:39+00:00","updated_at":"2026-11-02T08:22:39+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-02T08:22:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Autofill service module flaw may expose data confidentiality","impact":"medium","summary":"A permission control weakness exists in the autofill service module, as stated in the NVD entry. Successful exploitation may affect the confidentiality of the service, meaning data it handles could be read.","audience":"everyone","category":"other","nicknames":[],"who_cares":["autofill"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"service data may be readable by unauthorized parties","analyst_note":"Identify the vendor and product behind the autofill service module from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-101178) and check its advisory for affected versions and fix.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000586,"input_tokens":4050,"output_tokens":362,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101178':11A,14A '-2026':10A,13A 'affect':35B,63C 'autofil':1A,15B,23B,53C 'confidenti':8A,37B,65C 'control':18B,49C 'could':45B 'cve':9A,12A 'data':7A,42B 'entri':31B 'exist':20B 'exploit':33B,58C 'expos':6A 'flaw':4A 'handl':44B 'impact':56C 'may':5A,34B,62C 'mean':41B 'modul':3A,25B,55C 'nvd':30B 'permiss':17B,48C 'read':47B 'servic':2A,24B,40B,54C,64C 'state':27B 'success':32B,57C 'vulner':50C,61C 'weak':19B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["autofill","medium","other"],"first_public_at":"2026-11-02T08:17:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","cvss_by":"psirt@huawei.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101178","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101178","severity":null,"published_at":"2026-11-02T08:17:34+00:00","modified_at":"2026-11-02T08:17:34+00:00","first_seen_at":"2026-11-02T08:22:13+00:00","fetched_at":"2026-11-02T08:22:13+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}