CVE-2026-41978

MediumCVSS 4.4/10Last modified Jul 23, 2026

Description

Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Weakness enumeration

CWE-275

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2026
Last modified
Jul 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-419795.5Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confideCVE-2026-41985.3A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChangesCVE-2026-419805.5Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidCVE-2026-419815.3Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419826.4Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419834.3Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419845.2UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.CVE-2026-419855.1UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.CVE-2026-419862.4Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-419876.2Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availabilityCVE-2026-419882.5uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUIDCVE-2026-419896.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
CVE-2026-41978: Medium severity, CVSS 4.4 | Vulnix