---
id: "CVE-2026-58838"
kind: "vulnerability"
aliases: ["CVE-2026-58838"]
title: "Helpers.java input validation flaw lets local code read information"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["java", "other"]
not_affected_if: []
published_at: "2026-11-02T20:17:48+00:00"
first_seen_at: "2026-11-02T20:35:31+00:00"
updated_at: "2026-11-02T20:39:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58838", "first_seen_at": "2026-11-02T20:35:31+00:00"}]
---

# Helpers.java input validation flaw lets local code read information

Several functions in Helpers.java do not validate input properly, which can expose information. An attacker with local access can read that data without extra privileges and without user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-02T20:35:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-58838

## From the sources

In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_