Get real-time updates on Telegram
P5
CVE-2026-115801: khaiii 0.1, 0.2, 0.3, 0.4
CVE-2026-115801. CVSS 2.0 base score 4.3 (MEDIUM, Vendor/CNA).
Affected technology
khaiii · 0.1, 0.2, 0.3, 0.4
Kakao
Description’s affected range: up to 0.4
Component: JSON Config File Handler
Function: khaiii::nn::Linear::open
File: src/main/cpp/khaiii/nn/Linear.cpp
Attack conditions (VulDB, CVSS 4.0): Local · Low privileges required · No user interaction required
What an attacker can do
An attacker can change the analysis results without this defect." This vulnerability only affects products that are no longer supported by the maintainer. VulDB’s CVSS 4.0 assessment (base score 1.9/10) rates confidentiality, integrity and availability impact as low.
- CWE
- CWE-119, CWE-125
- CCR priority
- 17.2 /100 (P5)
- CVSS 2.0
- 4.3 /10 · CVSS:2.0/AV:L/AC:L/Au:S/C:P/I:P/A:P · Vendor/CNA
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-24 01:45:06.114611+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-115801.html