GenOffice vulnerabilities

CVEs whose affected-version data names the GenOffice package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108582Medium· 5.5

3w ago

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-m…

▾ Sunlitgenspark-ai · GenOfficeEPSS 0.11%via NVD