{"id":"CVE-2026-108591","revision":"a22515bb20c94c08a4718da140c53caf","records":[{"revision":"a22515bb20c94c08a4718da140c53caf","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-108591","aliases":[],"title":"InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool","description":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.","state":0,"publishedAt":"2026-10-10T18:16:55.939+00:00","modifiedAt":"2026-10-18T11:53:08.98+00:00","affected":[{"ecosystem":"Vendor product","name":"InnoShop","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"innocommerce\",\n                    \"product\": \"InnoShop\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0.9.2\",\n                            \"lessThanOrEqual\": \"0.9.2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"repo\": \"https://github.com/innocommerce/innoshop\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":5.9,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","score":4.4,"severity":"MEDIUM"}],"references":["https://hackmd.io/@haind/innoshop-mcp-local-file-read","https://github.com/innocommerce/innoshop/blob/6af6a9744414d10d2f5aab516ed0b6c3045a2848/innopacks/aicore/src/Tools/FileUploadTool.php#L55-L89","https://github.com/innocommerce/innoshop/blob/6af6a9744414d10d2f5aab516ed0b6c3045a2848/innopacks/restapi/src/Services/UploadService.php#L33","https://github.com/innocommerce/innoshop","https://www.vulncheck.com/advisories/innoshop-0.9.2-local-file-disclosure-via-ai-core-mcp-file-upload-tool"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-108591","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-108591","identifiers":["CVE-2026-108591"]},"retained":false,"historicalAffected":[]}],"coverage":[]}