CVE-2026-101157

Summary

This vulnerability allows an attacker to inject malicious content that can be executed in the context of an authenticated user, potentially compromising their session and accessing sensitive data.

Exploitability

Exploitation requires adjacent-network access and an unauthenticated attacker, making it moderately difficult to achieve.

Blast radius

If exploited, the attacker could access sensitive data, modify system state, or disrupt services, impacting the victim's authenticated browser session.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the named endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.