CVE-2026-114574

massCodeIO massCode Local HTTP Service index.ts information disclosure

State: Published
Severity: 5.3 Medium
Published: Oct 21, 2026
Updated: Oct 28, 2026
Reserved: Oct 21, 2026

Description

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The name of the patch is d25d8fa3f5a1e34285c8634f18729650c0c05cda. It is advisable to implement a patch to correct this issue.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P	VulDB
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C	VulDB
3.0	4.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C	VulDB
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C	VulDB

Weaknesses

CWE-200 Information Disclosure
CWE-284 Improper Access Controls

Affected Products

Product	Versions
massCodemassCodeIO	5.10Affected

References

VDB-424941 | massCodeIO massCode Local HTTP Service index.ts information disclosurevdb-entry
VDB-424941 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-114574 | CVE Analysis and Reportthird-party-advisory
Submit #1021288 | https://github.com/massCodeIO/massCode massCode 5.10 Local Sensitive Logic Exposure leading to airbitary notes/code rthird-party-advisory
https://github.com/massCodeIO/massCode/issues/966exploitissue-tracking
https://github.com/massCodeIO/massCode/pull/912issue-trackingpatch
https://github.com/massCodeIO/massCode/commit/d25d8fa3f5a1e34285c8634f18729650c0c05cdapatch
https://github.com/massCodeIO/massCode/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.