---
id: "CVE-2026-115947"
kind: "vulnerability"
aliases: ["CVE-2026-115947"]
title: "HUSKY: unauthenticated request exposes sensitive data in versions up to 1.4.6"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["husky", "other"]
not_affected_if: []
published_at: "2026-10-30T19:18:13+00:00"
first_seen_at: "2026-10-30T19:25:28+00:00"
updated_at: "2026-10-30T19:26:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115947", "first_seen_at": "2026-10-30T19:25:28+00:00"}]
---

# HUSKY: unauthenticated request exposes sensitive data in versions up to 1.4.6

HUSKY versions up to 1.4.6 expose sensitive data to unauthenticated requests, according to the NVD entry. The sources do not say which data is exposed or through which path an attacker reaches it.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed HUSKY version against the affected range (1.4.6 and below).

## Timeline

- 2026-10-30T19:25:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115947

## From the sources

Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_