CVE-2026-114574: massCodeIO massCode Local HTTP Service index.ts information disclosure
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The name of the patch is d25d8fa3f5a1e34285c8634f18729650c0c05cda. It is advisable to implement a patch to correct this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
massCodeIO massCodeto a version that resolves this vulnerability.Patch d25d8fa3f5a1e34285c8634f18729650c0c05cda
Event History
Frequently Asked Questions
What access and conditions does an attacker need?
The issue can be exploited remotely without privileges, but it requires user interaction.
What is the reported security impact?
The reported impact is disclosure of information. No integrity or availability impact is indicated by the provided severity vector.
Which deployment should be prioritized for remediation?
massCode version 5.10 is identified as affected. The provided data does not establish whether other versions are affected.
Is exploit activity a realistic concern?
A public exploit has been disclosed and may be used, so exposed deployments should be treated as having an available exploitation path.
What fix is available?
The identified patch is d25d8fa3f5a1e34285c8634f18729650c0c05cda. Implement that patch to address the issue.