CVE-2026-108582 genspark-ai CVE debrief

Who should care

System administrators and security teams responsible for GenOffice deployments should assess exposure and prioritize remediation to prevent local unprivileged users from accessing sensitive documents.

Why it matters

CVE-2026-108582 is a medium-severity vulnerability in GenOffice that allows local unprivileged users to read uploaded and generated documents. System administrators and security teams should assess exposure and prioritize remediation to prevent potential data breaches.

• Verify exposure of uploaded and generated documents to local unprivileged users
• Assess the risk of unauthorized access to sensitive information
• Prioritize remediation to prevent potential data breaches
• Verify version 0.11.505 or earlier is in use and update if necessary

Technical summary

The GenOffice HTTP MCP server file store has incorrect permissions, allowing local unprivileged users to read uploaded and generated documents by listing the world-readable genoffice-mcp-http directory under the system temporary directory. This vulnerability can be exploited to bypass the HTTP bearer token. The affected product is GenOffice through version 0.11.505. To address this vulnerability, it is essential to assess the exposure of GenOffice deployments and prioritize remediation. The incorrect permissions in the HTTP MCP server file store enable local unprivileged users to access sensitive documents.

Defensive priority

Assess exposure and prioritize remediation for GenOffice deployments, focusing on local unprivileged user access.

Recommended defensive actions

• Assess GenOffice deployments for exposure to local unprivileged user access
• Verify version 0.11.505 or earlier is in use and prioritize remediation
• Restrict access to the genoffice-mcp-http directory
• Monitor for unauthorized access to uploaded and generated documents
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability allows local unprivileged users to list and read client uploads and converted outputs from the world-readable genoffice-mcp-http directory under the system temporary directory, bypassing the HTTP bearer token.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.