{"id":"CVE-2026-116282","kind":"vulnerability","aliases":["CVE-2026-116282"],"related":[],"title":"Kameleo: Cookie Controller flaw lets remote callers read cookie data","description":"A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.ListCookies of the file client-engine-application/w.cs of the component Cookie Controller. The manipulation of the argument guid results in information disclosure. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"Kameleo up to version 5.3.1 has a flaw in the CookieController.ListCookies function, where manipulating the guid argument discloses information. An attacker who can reach the affected component remotely can read data it should not expose, such as stored browser cookies.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser-automation","kameleo","package"],"not_affected_if":[],"how_to_check":"- Check the installed Kameleo version and whether it is `5.3.1` or earlier\n- unknown","fix":"- unknown","status":"open","published_at":"2026-10-26T14:16:35+00:00","first_seen_at":"2026-10-26T14:30:37+00:00","triaged_at":"2026-10-26T14:32:45+00:00","updated_at":"2026-10-26T14:32:45+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-26T14:32:45Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"Kameleo: Cookie Controller flaw lets remote callers read cookie data","impact":"low","summary":"Kameleo up to version 5.3.1 has a flaw in the CookieController.ListCookies function, where manipulating the guid argument discloses information. An attacker who can reach the affected component remotely can read data it should not expose, such as stored browser cookies.","category":"package","nicknames":[],"who_cares":["kameleo","browser-automation"],"confidence":0.5,"needs_auth":"unknown","worst_case":"remote caller reads cookie data from the application","analyst_note":"Confirm the exact exposure of the Cookie Controller endpoint and whether any patched version or vendor fix exists; the vendor did not respond, so check the NVD entry and Kameleo release notes.","how_to_check":"- Check the installed Kameleo version and whether it is `5.3.1` or earlier\n- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running Kameleo up to and including version 5.3.1 where the Cookie Controller component is reachable over the network. The sources do not say which deployment setups expose it, and the vendor has not responded to the disclosure.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000568,"input_tokens":3328,"output_tokens":471,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116282':13A,16A '-2026':12A,15A '/w.cs':88C '5.3.1':26B,72C 'affect':47B,73C 'applic':87C 'argument':38B,98C 'attack':42B,105C 'autom':19B 'browser':18B,60B 'browser-autom':17B 'caller':7A 'client':85C 'client-engine-appl':84C 'compon':48B,91C 'contact':113C 'control':3A,93C 'cooki':2A,9A,61B,92C 'cookiecontroller.listcookies':32B,80C 'cve':11A,14A 'data':10A,52B 'disclos':39B 'disclosur':103C,117C 'discov':67C 'earli':114C 'engin':86C 'execut':108C 'expos':56B 'file':83C 'flaw':4A,29B,64C 'function':33B,79C 'guid':37B,99C 'inform':40B,102C 'issu':76C 'kameleo':1A,20B,22B,69C 'let':5A 'manipul':35B,95C 'packag':21B 'reach':45B 'read':8A,51B 'remot':6A,49B,109C 'respond':121C 'result':100C 'secur':63C 'store':59B 'vendor':111C 'version':25B 'way':124C","nicknames":[],"mitigations":[],"who_affected":"Teams running Kameleo up to and including version 5.3.1 where the Cookie Controller component is reachable over the network. The sources do not say which deployment setups expose it, and the vendor has not responded to the disclosure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T14:16:35+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116282","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116282","severity":null,"published_at":"2026-10-26T14:16:35+00:00","modified_at":"2026-10-26T14:16:35+00:00","first_seen_at":"2026-10-26T14:30:37+00:00","fetched_at":"2026-10-26T14:30:37+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}