Live › vulnerability › CVE-2026-111935
Go to dashboardNoteGen through 0.38.3 accepts unvalidated sourceUrl paths in synced chat content, including absolute paths and file:// URLs. An attacker with write access to the victim's sync target can make the image analysis feature send local image files to the configured AI provider.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
NoteGen users who sync notes and chats through a shared or writable sync target and use chat image analysis. Users with a private, single-owner sync target have a much smaller exposure, since the attacker needs write access to that target.
No product ranges from the sources yet.
0.38.3image_inspect) is in use and whether the sync target is writable by others0.38.3 (fixed version unknown from sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing image_inspect to send local images to the AI provider.
This page as .md · .json · in your agent: get_signal("CVE-2026-111935")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.