Skip to content
OpenAdvisories

Vendor

genspark-ai

1 known vulnerabilities.

Products

GenOffice 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-108582

    GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

    GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory unde…

    genspark-ai GenOffice