Vulnerability · Published Oct 10, 2026 · Assigned by VulnCheck

CVE-2026-108582GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

Medium 5.5

In plain English

A medium-severity incorrect permission assignment in GenOffice from genspark-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.1%top 98.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.

Affected products (as reported)

Vendor	Product	Versions
genspark-ai	GenOffice	0 – through 0.11.505

Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://hackmd.io/@haind/genoffice-http-mcp-temp-file-disclosure third-party-advisory
https://github.com/genspark-ai/genoffice/blob/v0.11.505/packages/cli/src/mcp/files.ts#L70-L90 technical-description
GenOffice v0.11.505 Release Notes product, release-notes
VulnCheck Advisory: GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store third-party-advisory