---
id: "CVE-2026-113345"
kind: "vulnerability"
aliases: ["CVE-2026-113345"]
title: "Japan MLIT inspection system: file tampering enables arbitrary code execution"
severity: "high"
cvss: 8.5
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["japan-government", "other", "windows"]
not_affected_if: []
published_at: "2026-10-26T05:17:54+00:00"
first_seen_at: "2026-10-26T05:28:34+00:00"
updated_at: "2026-10-26T05:29:08+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113345", "first_seen_at": "2026-10-26T05:28:34+00:00"}]
---

# Japan MLIT inspection system: file tampering enables arbitrary code execution

The Electronic delivery item Inspection Support System from Japan's Ministry of Land, Infrastructure, Transport and Tourism has improper file access permissions on its installation folder. A user or attacker who can write to those files can modify them and run arbitrary code.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-26T05:28:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113345

## From the sources

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_