Insecure File Permission Vulnerability in Summarize by Steipete

CVE-2026-45246

What is CVE-2026-45246?

An insecure file permission vulnerability exists in the configuration rewrite path of Summarize prior to version 0.15.1. This flaw allows local users on shared Unix-like systems to read sensitive credentials by exploiting the default filesystem permissions. When the configuration file is rewritten without preserving the original permissions, it results in the exposure of critical API keys and provider credentials to unauthorized users. This can lead to significant data breaches and unauthorized access to sensitive information, highlighting the need for careful permission management in application deployments.

References