CVE-2026-110775Published
Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110775 · Microsoft / collected KEV context
cve-program · CVE-2026-110775
- https://hackmd.io/@hieuPenguinnn/nexent-knowledge-base-cross-tenant-file-read
- https://github.com/ModelEngine-Group/nexent/blob/90bf1a5dbb1eb16bb4a28c2407ed4b6eda9a09bf/backend/services/file_management_service.py#L177
- https://github.com/ModelEngine-Group/nexent
- https://www.vulncheck.com/advisories/nexent-through-2.7.0-cross-tenant-knowledge-base-file-read-via-check-file-access
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.