CVE-2026-45246

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by exploiting default filesystem permissions. When the refresh-free path rewrites the configuration file, it creates the replacement with default process umask permissions instead of preserving the original file permissions, exposing the config file containing API keys and provider credentials to other local users on shared Unix-like systems.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/steipete/summarize/commit/9e990193650a23dab73f37d5e1964d574a44098b	Patch
https://github.com/steipete/summarize/pull/217	Exploit Issue Tracking Patch
https://github.com/steipete/summarize/releases/tag/v0.15.2	Release Notes
https://www.vulncheck.com/advisories/summarize-insecure-file-permissions-information-disclosure	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:steipete:summarize:*:*:*:*:*:*:*:*

History

14 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Summarize anterior a 0.15.1 contiene una vulnerabilidad de permisos de archivo inseguros en la ruta de reescritura de configuración sin actualización que permite a los usuarios locales leer credenciales sensibles explotando los permisos predeterminados del sistema de archivos. Cuando la ruta sin actualización reescribe el archivo de configuración, crea el reemplazo con permisos umask de proceso predeterminados en lugar de preservar los permisos de archivo originales, exponiendo el archivo de configuración que contiene claves API y credenciales de proveedor a otros usuarios locales en sistemas compartidos tipo Unix.

Information

Published : 2026-05-18 20:16

Updated : 2026-10-14 20:10

NVD link : CVE-2026-45246

Mitre link : CVE-2026-45246

CVE.ORG link : CVE-2026-45246

JSON object : View

Products Affected

steipete

summarize

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2026-45246", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45246", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-18T21:27:09.577230Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/steipete/summarize", "vendor": "steipete", "product": "summarize", "versions": [{"status": "affected", "version": "0", "lessThan": "0.15.1", "versionType": "semver"}, {"status": "unaffected", "version": "9e990193650a23dab73f37d5e1964d574a44098b", "versionType": "git"}], "packageURL": "pkg:github/steipete/summarize", "defaultStatus": "affected"}]}], "published": "2026-05-18T20:16:38.823", "references": [{"url": "https://github.com/steipete/summarize/commit/9e990193650a23dab73f37d5e1964d574a44098b", "tags": ["Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/steipete/summarize/pull/217", "tags": ["Exploit", "Issue Tracking", "Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/steipete/summarize/releases/tag/v0.15.2", "tags": ["Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/summarize-insecure-file-permissions-information-disclosure", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by exploiting default filesystem permissions. When the refresh-free path rewrites the configuration file, it creates the replacement with default process umask permissions instead of preserving the original file permissions, exposing the config file containing API keys and provider credentials to other local users on shared Unix-like systems."}, {"lang": "es", "value": "Summarize anterior a 0.15.1 contiene una vulnerabilidad de permisos de archivo inseguros en la ruta de reescritura de configuraci\u00f3n sin actualizaci\u00f3n que permite a los usuarios locales leer credenciales sensibles explotando los permisos predeterminados del sistema de archivos. Cuando la ruta sin actualizaci\u00f3n reescribe el archivo de configuraci\u00f3n, crea el reemplazo con permisos umask de proceso predeterminados en lugar de preservar los permisos de archivo originales, exponiendo el archivo de configuraci\u00f3n que contiene claves API y credenciales de proveedor a otros usuarios locales en sistemas compartidos tipo Unix."}], "lastModified": "2026-10-14T20:10:00.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:steipete:summarize:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDA6FF18-A9BB-4892-B428-AB85BB58E16A", "versionEndExcluding": "0.15.1"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}