External Control of File Path Vulnerability in NoteGen by Codexu
CVE-2026-111935

2.1LOW

Key Information:

Vendor

Codexu

Status
Notegen
Vendor
CVE Published:
19 October 2026

What is CVE-2026-111935?

NoteGen, up to version 0.38.3, exhibits a vulnerability that allows attackers to exploit external control of file paths in chat image analysis functionalities. This flaw enables unauthorized users with write access to a victim's sync target to manipulate synced sourceUrl paths, potentially leading to disclosure of local image files. By injecting absolute paths or file:// URLs, attackers may cause the image_inspect feature to transmit local images to the AI provider, posing significant risks to user data privacy.

Affected Version(s)

NoteGen 0 <= 0.38.3

References

https://github.com/codexu/note-gen/issues/1296
issue-tracking
https://github.com/codexu/note-gen/commit/6840c13c4fcb71a...
patch
https://github.com/codexu/note-gen/commit/64e671eb58f56ad...
patch

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

George Chen
.