{"id":"CVE-2026-111915","kind":"vulnerability","aliases":["CVE-2026-111915"],"related":[],"title":"Yank Note: path traversal lets unauthenticated users read arbitrary server files","description":"Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlisted endpoint, to read SSH keys, configuration, or notes.","summary":"Yank Note before 3.93.1 has a path traversal flaw in its public /api/help endpoint, where the path or doc parameter is sanitized only once. An unauthenticated attacker sending repeated '../' segments can read arbitrary files, including SSH keys, configuration and notes.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["node","package","self-hosted","yank-note"],"not_affected_if":["auth-required","local-only"],"how_to_check":"- Check the installed Yank Note version; versions before `3.93.1` are affected.\n- Confirm whether the instance is reachable from the internet or an untrusted network.\n- Send a request to `/api/help` with repeated `../` segments in the `path` or `doc` parameter from an unauthenticated client and see whether it returns files outside the help directory.","fix":"- Upgrade Yank Note to `3.93.1` or later.\n- Until upgraded, block or restrict access to `/api/help` and rotate any SSH keys or secrets stored on the host that may have been exposed.","status":"open","published_at":"2026-10-19T14:17:00+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T03:04:21+00:00","updated_at":"2026-10-25T03:04:21+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-25T03:04:21Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Yank Note to `3.93.1` or later.\n- Until upgraded, block or restrict access to `/api/help` and rotate any SSH keys or secrets stored on the host that may have been exposed.","reach":"internet","title":"Yank Note: path traversal lets unauthenticated users read arbitrary server files","impact":"high","summary":"Yank Note before 3.93.1 has a path traversal flaw in its public /api/help endpoint, where the path or doc parameter is sanitized only once. An unauthenticated attacker sending repeated '../' segments can read arbitrary files, including SSH keys, configuration and notes.","category":"package","nicknames":[],"who_cares":["yank-note","self-hosted","node"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker reads SSH keys, config files and private notes from the server","analyst_note":"Confirm the fixed version and whether the endpoint is reachable in default desktop vs server installs at the NVD entry or the Yank Note release notes.","how_to_check":"- Check the installed Yank Note version; versions before `3.93.1` are affected.\n- Confirm whether the instance is reachable from the internet or an untrusted network.\n- Send a request to `/api/help` with repeated `../` segments in the `path` or `doc` parameter from an unauthenticated client and see whether it returns files outside the help directory.","needs_analyst":true,"not_affected_if":["auth-required","local-only"],"who_is_affected":"Anyone running Yank Note before 3.93.1 where the server is reachable by a client that can send requests to /api/help, since that endpoint is publicly allowlisted and needs no login. Local-only desktop use with no network exposure is less exposed. unknown whether the sources list specific deployment modes beyond this.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000663,"input_tokens":3344,"output_tokens":657,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-111915':14A,17A '-2026':13A,16A '/api/help':38B,91C '3.93.1':29B,69C 'allow':76C 'allowlist':107C 'arbitrari':9A,58B,82C 'attack':52B,79C,92C 'bypass':98C 'configur':63B,113C 'contain':70C 'cve':12A,15A 'doc':44B,88C 'endpoint':39B,108C 'file':11A,59B,83C 'flaw':34B 'host':22B 'includ':60B 'key':62B,112C 'let':5A 'node':18B 'note':2A,25B,27B,65B,67C,115C 'packag':19B 'paramet':45B,89C 'path':3A,32B,42B,72C,86C 'public':37B,106C 'read':8A,57B,81C,110C 'remot':78C 'repeat':54B,95C 'replac':102C 'sanit':47B,103C 'segment':55B,96C 'self':21B 'self-host':20B 'send':53B 'server':10A 'singl':101C 'single-replac':100C 'ssh':61B,111C 'suppli':94C 'travers':4A,33B,73C 'unauthent':6A,51B,77C 'user':7A 'via':84C 'vulner':74C 'yank':1A,24B,26B,66C 'yank-not':23B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Yank Note before 3.93.1 where the server is reachable by a client that can send requests to /api/help, since that endpoint is publicly allowlisted and needs no login. Local-only desktop use with no network exposure is less exposed. unknown whether the sources list specific deployment modes beyond this.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T14:17:00+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111915","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111915","severity":null,"published_at":"2026-10-19T14:17:00+00:00","modified_at":"2026-10-19T21:14:14+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}