By weakness (CWE)

CWE-552: related vulnerabilities

CVEs classified under CWE-552. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

5 published vulnerabilities

• CVE-2025-66389HIGH 7.5

  GitHub Copilot version 1.372.0 contains a security flaw that allows the AI assistant to access files outside the workspace folder without explicit user permission. An attacker could potentially exploit this through indirect prompt injection—feeding malicious instructions into Copilot through compromised or attacker-controlled text—to read sensitive files on the user's system and exfiltrate their contents. The vulnerability stems from improper validation of file-handler URI parameters passed to the fetch_webpage function.

• CVE-2026-59703HIGH 7.5

  Repomix, a tool for working with Git repositories, contains a vulnerability that allows attackers to read any Git repository stored on a server without needing credentials. The flaw exists in how the application validates Git repository URLs—it fails to properly block requests using the file:// protocol scheme. By crafting a malicious URL with file://, an unauthenticated attacker can bypass validation checks and trick the underlying git clone command into accessing local repositories on the filesystem, exposing all tracked files to unauthorized viewing.

• CVE-2026-40425MEDIUM 5.7

  A vulnerability in the Danelec MacGregor Voyage Data Recorder web interface allows an authenticated administrator to directly modify sensitive authentication-related files on the system. This could enable an attacker with admin credentials to alter the root password and gain elevated system control. While exploitation requires existing administrative access, the ability to change root credentials represents a critical privilege escalation path that should be addressed promptly.

• CVE-2026-13533MEDIUM 5.3

  Cockpit CMS versions up to 0.12.2 contain a vulnerability in its YAML configuration handler that allows unauthorized file access. An attacker can remotely read sensitive files or access restricted directories without authentication. The issue stems from improper handling of YAML parsing in the configuration module, and exploit code is publicly available. This is a disclosure made without vendor cooperation.

• CVE-2026-45543MEDIUM 5.3

  A flaw in Nextcloud Forms allows collaborators who have been removed from a form to retain unauthorized read access to uploaded respondent files. This affects forms running Nextcloud versions 4.3.0 through 5.2.6. If a user previously had access to view form results, removing them as a collaborator does not fully revoke their ability to read uploaded files associated with that form. The vulnerability is limited to files uploaded within forms where the removed user previously held results-viewing permissions.