PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-111618 coaidev CVE debrief

CVE-2026-111618 CoAI Unauthenticated Path Traversal vulnerability allows attackers to download arbitrary files via archive download endpoints. CoAI users and administrators should assess exposure and prioritize remediation to prevent unauthorized access and data exposure. The vulnerability is caused by insufficient validation of user input in the hash query parameter, enabling attackers to supply ../ sequences to access sensitive files. Defenders should verify CoAI version and patching status, implement authentication and authorization on archive download endpoints, and monitor CoAI logs for suspicious activity.

Vendor
coaidev
Product
CoAI
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-16
Original CVE updated
2026-10-23
Advisory published
2026-10-16
Advisory updated
2026-10-23

Who should care

CoAI users and administrators should assess exposure and prioritize remediation to prevent unauthorized access and data exposure. Defenders should verify CoAI version and patching status, implement authentication and authorization on archive download endpoints, and monitor CoAI logs for suspicious activity. Security teams should review compensating controls for exposed systems and track exceptions and retest remediated assets.

Why it matters

CVE-2026-111618 is a medium-severity vulnerability in CoAI that allows unauthenticated path traversal. Defenders should prioritize remediation, especially for CoAI users and administrators, as it could lead to unauthorized access and data exposure.

  • Potential unauthorized access to sensitive files
  • Possible data leakage or exposure
  • Need for authentication and authorization on archive download endpoints
  • Verification of CoAI version and patching status required

Technical summary

CoAI through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated archives. The vulnerability is caused by insufficient validation of user input, enabling attackers to access sensitive files. Defenders should prioritize remediation, implement authentication and authorization, and monitor CoAI logs for suspicious activity.

Defensive priority

Medium priority for CoAI users and administrators

Recommended defensive actions

  • Review and update CoAI installations to ensure they are using a version greater than 4.0.0
  • Implement authentication and authorization for archive download endpoints
  • Monitor CoAI logs for suspicious activity related to archive downloads
  • Verify CoAI version and patching status
  • Conduct vulnerability scanning and penetration testing
  • Review compensating controls for exposed systems
  • Track exceptions and retest remediated assets

Evidence notes

The CVE record and source item provide details on the unauthenticated path traversal vulnerability in CoAI through 4.0.0. The vulnerability is in the generation and article archive download endpoints via the hash query parameter. Evidence is limited to CVE and source-item details. Defenders should verify CoAI installations, review logs, and implement compensating controls. The CVE Program and NVD provide official records and vulnerability details.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-111618 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-111618

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-111618 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111618

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • CoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111618.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://hackmd.io/@hieuPenguinnn/coai-chatnio-generation-article-download-path-traversal

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/coaidev/coai/blob/v4.0.0/addition/generation/api.go

    Supplemental source - technical-description

  • Source reference

    Unverified legacy reference

    URL: https://github.com/coaidev/coai/blob/v4.0.0/addition/article/api.go

    Supplemental source - technical-description

  • Source reference

    Unverified legacy reference

    URL: https://www.vulncheck.com/advisories/coai-through-4.0.0-unauthenticated-path-traversal-via-archive-download-endpoints

    Supplemental source - third-party-advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.