CVE-2026-111935: NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

Q: Who can exploit this issue in practice?

An attacker needs write access to a victim's synchronization target. They can plant synced content containing an absolute path or file:// URL in a sourceUrl field.

Q: What user interaction is required for disclosure?

The victim must interact with the crafted content such that chat image analysis processes it. The vulnerable image_inspect behavior then sends the referenced local image to the configured AI provider.

Q: What data can be exposed?

The issue is limited to local image files that the affected application can read. The disclosed image is sent to the AI provider during image analysis.

Q: Which versions are affected?

NoteGen through version 0.38.3 is affected.

Published Oct 19, 2026

Updated

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing imageinspect to send local images to the AI provider.

Affected Software

1 affected component

NoteGen<=0.38.3

Event History

Oct 19, 2026

CVE Published

via MITRE·01:55 PM

Data Sourced

via MITRE·01:55 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue in practice?

An attacker needs write access to a victim's synchronization target. They can plant synced content containing an absolute path or file:// URL in a sourceUrl field.

What user interaction is required for disclosure?

The victim must interact with the crafted content such that chat image analysis processes it. The vulnerable image_inspect behavior then sends the referenced local image to the configured AI provider.

What data can be exposed?

The issue is limited to local image files that the affected application can read. The disclosed image is sent to the AI provider during image analysis.

Which versions are affected?

NoteGen through version 0.38.3 is affected.

CVE-2026-111935: NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue in practice?

What user interaction is required for disclosure?

What data can be exposed?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue in practice?

What user interaction is required for disclosure?

What data can be exposed?

Which versions are affected?