CVE-2026-104472

Summary

A missing authorization check in YesWiki's attachment download handler allows unauthenticated attackers to access confidential files from pages that should be restricted to specific users or groups. This vulnerability enables unauthorized data disclosure without requiring any authentication credentials.

Exploitability

The exploit is straightforward and requires no special preconditions - attackers simply need to know a valid page tag and file name to access restricted attachments, making it highly exploitable in environments where page names are guessable or discoverable.

Blast radius

In a typical deployment, this vulnerability could expose sensitive documents, images, or other attachments from read-restricted pages, potentially leading to unauthorized disclosure of confidential information that should only be accessible to authorized users.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to YesWiki 4.6.7 or later to address this missing authorization vulnerability in the attachment download handler.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.