{"id":"CVE-2026-115947","kind":"vulnerability","aliases":["CVE-2026-115947"],"related":[],"title":"HUSKY: unauthenticated request exposes sensitive data in versions up to 1.4.6","description":"Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.","summary":"HUSKY versions up to 1.4.6 expose sensitive data to unauthenticated requests, according to the NVD entry. The sources do not say which data is exposed or through which path an attacker reaches it.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["husky","other"],"not_affected_if":[],"how_to_check":"- Check the installed HUSKY version against the affected range (1.4.6 and below).","fix":null,"status":"open","published_at":"2026-10-30T19:18:13+00:00","first_seen_at":"2026-10-30T19:25:28+00:00","triaged_at":"2026-10-30T19:26:23+00:00","updated_at":"2026-10-30T19:26:23+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-30T19:26:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"HUSKY: unauthenticated request exposes sensitive data in versions up to 1.4.6","impact":"medium","summary":"HUSKY versions up to 1.4.6 expose sensitive data to unauthenticated requests, according to the NVD entry. The sources do not say which data is exposed or through which path an attacker reaches it.","audience":"businesses","category":"other","nicknames":[],"who_cares":["husky"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"unauthenticated attacker reads sensitive data from the application","analyst_note":"Find out which HUSKY product this is (the NVD title is ambiguous), which data is exposed, and whether a fixed version exists; check https://nvd.nist.gov/vuln/detail/CVE-2026-115947.","how_to_check":"- Check the installed HUSKY version against the affected range (1.4.6 and below).\n- unknown for any further check: the sources do not say which endpoint or file is involved.","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000627,"input_tokens":4059,"output_tokens":442,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115947':14A,17A '-2026':13A,16A '1.4.6':11A,23B,57C 'accord':30B 'attack':49B 'cve':12A,15A 'data':6A,26B,41B,53C 'entri':34B 'expos':4A,24B,43B 'exposur':54C 'huski':1A,18B,19B,56C 'nvd':33B 'path':47B 'reach':50B 'request':3A,29B 'say':39B 'sensit':5A,25B,52C 'sourc':36B 'unauthent':2A,28B,51C 'version':8A,20B,58C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T19:18:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115947","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115947","severity":null,"published_at":"2026-10-30T19:18:13+00:00","modified_at":"2026-10-30T19:22:27+00:00","first_seen_at":"2026-10-30T19:25:28+00:00","fetched_at":"2026-10-30T19:25:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}