{"id":"CVE-2026-56902","kind":"vulnerability","aliases":["CVE-2026-56902"],"related":[],"title":"Logic error in multiple locations leaks information to local users","description":"In multiple locations, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A logic error in several places in the code can expose information to a local user. The sources say an attacker needs no extra execution privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:14+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","triaged_at":"2026-11-10T20:53:53+00:00","updated_at":"2026-11-10T20:53:53+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:53:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Logic error in multiple locations leaks information to local users","impact":"low","summary":"A logic error in several places in the code can expose information to a local user. The sources say an attacker needs no extra execution privileges and no user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local user reads information they should not see","analyst_note":"Identify the affected product from the NVD record at https://nvd.nist.gov/vuln/detail/CVE-2026-56902; the description names no product, version or fix.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000608,"input_tokens":4498,"output_tokens":317,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-56902':13A,16A 'addit':73C 'attack':37B 'code':25B,63C 'could':65C 'cve':11A,14A 'disclosur':55C,70C 'due':56C 'error':2A,19B,60C 'execut':41B,74C 'exploit':83C 'expos':27B 'extra':40B 'inform':7A,28B,54C,69C 'interact':46B,78C 'lead':66C 'leak':6A 'local':9A,31B,68C 'locat':5A,49C 'logic':1A,18B,59C 'multipl':4A,48C 'need':38B,76C,81C 'place':22B 'possibl':53C 'privileg':42B,75C 'say':35B 'sever':21B 'sourc':34B 'user':10A,32B,45B,77C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"campaign_type":null,"search_a":"'-2026':12A,15A '-56902':13A,16A 'cve':11A,14A 'error':2A 'inform':7A 'leak':6A 'local':9A 'locat':5A 'logic':1A 'multipl':4A 'user':10A","search_b":"'attack':37B 'code':25B 'error':19B 'execut':41B 'expos':27B 'extra':40B 'inform':28B 'interact':46B 'local':31B 'logic':18B 'need':38B 'place':22B 'privileg':42B 'say':35B 'sever':21B 'sourc':34B 'user':32B,45B","search_c":"'addit':73C 'code':63C 'could':65C 'disclosur':55C,70C 'due':56C 'error':60C 'execut':74C 'exploit':83C 'inform':54C,69C 'interact':78C 'lead':66C 'local':68C 'locat':49C 'logic':59C 'multipl':48C 'need':76C,81C 'possibl':53C 'privileg':75C 'user':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-56902","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56902","severity":null,"published_at":"2026-11-10T20:19:14+00:00","modified_at":"2026-11-10T20:19:14+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","fetched_at":"2026-11-10T20:46:06+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}