CVE-2026-110976: AI Engine 0 to before 3.7.9

Affected technology

AI Engine · 0 to before 3.7.9
Vendor not specified by the source

Description’s affected range: before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 18-Oct-2026 08:28 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 08:28:52.321542+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-110976.html