CVE-2026-108582 | genspark-ai GenOffice up to 0.11.505 HTTP MCP server file store permission

October 10, 2026 Yanac

A vulnerability was found in genspark-ai GenOffice up to 0.11.505. It has been classified as problematic. Affected is an unknown function of the component HTTP MCP server file store. This manipulation causes permission issues.

The identification of this vulnerability is CVE-2026-108582. The attack can only be executed locally. There is no exploit available.VulDB Recent EntriesRead More