CVE-2026-116284 Kameleo CVE debrief

Who should care

Defenders responsible for Kameleo instances should assess exposure and verify the vulnerability. They should prioritize verifying the vulnerability in their Kameleo instances and assessing exposure to potential information disclosure attacks. Defenders should review access controls for the /general/user-info file and monitor for potential information disclosure attempts. They should also consider the operational impacts of the vulnerability, including the

Why it matters

Defenders should prioritize verifying the vulnerability in their Kameleo instances and assessing exposure to potential information disclosure attacks.

• Verify potential information disclosure in Kameleo instances
• Assess exposure of Local API to remote attacks
• Review access controls for /general/user-info file

Technical summary

The vulnerability affects Kameleo up to version 5.3.1 and is located in the /general/user-info file of the Local API component. The vulnerability allows for information disclosure and can be exploited remotely. The attack may be performed from remote, and defenders should prioritize verifying the vulnerability in their Kameleo instances and assessing exposure. The vulnerability affects unknown code, and its manipulation leads to information disclosure. Defenders should review access controls for the /general/user-info file and monitor for potential information disclosure attempts.

Defensive priority

Defenders should prioritize verifying the vulnerability in their Kameleo instances and assessing exposure.

Recommended defensive actions

• Verify Kameleo version and assess exposure
• Review Local API configuration and access controls
• Monitor for potential information disclosure attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide limited information about the vulnerability. The vendor was contacted but did not respond. The source item and CVE record provide some details, but additional verification is needed to assess exposure and potential information disclosure. Defenders should verify the vulnerability in their Kameleo instances and review access controls for the /general/user-info file.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.