---
id: "CVE-2026-107055"
kind: "vulnerability"
aliases: ["CVE-2026-107055"]
title: "AppML neutriNote CE: autosave lets unauthorized users write arbitrary files"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["autosave", "neutrinote", "other"]
not_affected_if: []
published_at: "2026-10-29T17:17:58+00:00"
first_seen_at: "2026-10-29T17:26:16+00:00"
updated_at: "2026-10-29T17:28:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107055", "first_seen_at": "2026-10-29T17:26:16+00:00"}]
---

# AppML neutriNote CE: autosave lets unauthorized users write arbitrary files

The autosave component of AppML neutriNote CE, version code 1387, has insecure permissions. An unauthorized attacker can write arbitrary files on the affected system.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed neutriNote CE version code against `1387`

## Timeline

- 2026-10-29T17:26:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107055

## From the sources

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_