CVE-2026-107029: Security vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Which installations should be prioritized for review?

Deployments running rubenalfon Pile v1.1.3 should be reviewed, as this is the affected version identified in the available information.

What does an attacker need to do to exploit this issue?

The attacker must be able to invoke an exported component. The available information describes the attacker as unauthorized and does not identify additional prerequisites or required permissions.

Is a fixed version or temporary mitigation identified?

No fixed version, configuration workaround, or temporary mitigation is provided in the available information.

CVE-2026-107029: Security vulnerability

Event History

Frequently Asked Questions

Which installations should be prioritized for review?

What does an attacker need to do to exploit this issue?

Is a fixed version or temporary mitigation identified?

Company

Resources

Contact

Frequently Asked Questions

Which installations should be prioritized for review?

What does an attacker need to do to exploit this issue?

Is a fixed version or temporary mitigation identified?