CVE-2026-108591 InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool
Authenticated administrators can read sensitive server files like .env by abusing the AI Core MCP file_upload tool's source argument.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-108591?
CVE-2026-108591 is a medium-severity path traversal vulnerability in innocommerce InnoShop, published on 10 Oct 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.
Weakness: CWE-73
Which versions are affected by CVE-2026-108591?
How do I fix CVE-2026-108591?
No fix has been published for CVE-2026-108591 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-108591 being exploited?
There is no known exploitation of CVE-2026-108591 in the wild and no public exploit code.
Sources
Also known as GHSA-93ww-wv4j-3wjq.