CVE-2026-33954

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-33954", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-24T19:50:52.106Z", "datePublished": "2026-03-27T21:23:30.148Z", "dateUpdated": "2026-03-27T21:57:41.206Z"}, "containers": {"cna": {"title": "LinkAce discloses private notesto unauthorized authenticated users via the web link detail page", "problemTypes": [{"descriptions": [{"cweId": "CWE-285", "lang": "en", "description": "CWE-285: Improper Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q"}], "affected": [{"vendor": "Kovah", "product": "LinkAce", "versions": [{"version": "< 2.5.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-27T21:23:30.148Z"}, "descriptions": [{"lang": "en", "value": "LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed to a different authenticated user via the web interface. The API appears to correctly enforce note visibility, but the web link detail page renders notes without applying equivalent visibility filtering. As a result, an authenticated user who is allowed to view another user's `internal` or `public` link can read that user's `private` notes attached to the link. Version 2.5.3 patches the issue."}], "source": {"advisory": "GHSA-88h3-cq25-vw8q", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-27T21:57:28.740443Z", "id": "CVE-2026-33954", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T21:57:41.206Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-33954", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T21:57:28.740443Z"}}}], "references": [{"url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T21:57:38.150Z"}}], "cna": {"title": "LinkAce discloses private notesto unauthorized authenticated users via the web link detail page", "source": {"advisory": "GHSA-88h3-cq25-vw8q", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Kovah", "product": "LinkAce", "versions": [{"status": "affected", "version": "< 2.5.3"}]}], "references": [{"url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q", "name": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed to a different authenticated user via the web interface. The API appears to correctly enforce note visibility, but the web link detail page renders notes without applying equivalent visibility filtering. As a result, an authenticated user who is allowed to view another user's `internal` or `public` link can read that user's `private` notes attached to the link. Version 2.5.3 patches the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285: Improper Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-27T21:23:30.148Z"}}}, "cveMetadata": {"cveId": "CVE-2026-33954", "state": "PUBLISHED", "dateUpdated": "2026-03-27T21:57:41.206Z", "dateReserved": "2026-03-24T19:50:52.106Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-27T21:23:30.148Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "LinkAce", "vendor": "Kovah", "versions": [{"status": "affected", "version": "< 2.5.3"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:linkace:linkace:*:*:*:*:*:*:*:*", "matchCriteriaId": "5085A4DA-FF49-40D4-84A3-AFAFEC3902FC", "versionEndExcluding": "2.5.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed to a different authenticated user via the web interface. The API appears to correctly enforce note visibility, but the web link detail page renders notes without applying equivalent visibility filtering. As a result, an authenticated user who is allowed to view another user's `internal` or `public` link can read that user's `private` notes attached to the link. Version 2.5.3 patches the issue."}, {"lang": "es", "value": "LinkAce es un archivo autoalojado para recopilar enlaces de sitios web. En versiones anteriores a la 2.5.3, una nota privada adjunta a un enlace no privado puede ser divulgada a un usuario autenticado diferente a trav\u00e9s de la interfaz web. La API parece aplicar correctamente la visibilidad de las notas, pero la p\u00e1gina de detalles del enlace web renderiza las notas sin aplicar un filtrado de visibilidad equivalente. Como resultado, un usuario autenticado al que se le permite ver el enlace \u2019interno\u2019 o \u2019p\u00fablico\u2019 de otro usuario puede leer las notas \u2019privadas\u2019 de ese usuario adjuntas al enlace. La versi\u00f3n 2.5.3 corrige el problema."}], "id": "CVE-2026-33954", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33954", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-27T21:57:28.740443Z", "version": "2.0.3"}}]}, "published": "2026-03-27T22:16:21.917", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-88h3-cq25-vw8q"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.5.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "LinkAce", "source": "cna", "vendor": "Kovah"}, "product": "linkace", "vendor": "kovah"}], "analysis": {"en": {"generated_at": "2026-03-31T19:41:02.539189+00:00", "value": {"mitigation_remediation": ["Upgrade LinkAce to version 2.5.3 or later to apply the patch that enforces correct note visibility.", "Verify that the web interface correctly filters note visibility for private notes after the upgrade.", "If an upgrade is not immediately possible, restrict users from accessing link detail pages that contain private notes until a fix is deployed.", "Monitor application logs for attempts to view private notes by unauthorized users and remediate any incidents promptly."], "summary": {"action": "Patch immediately", "impact": "Confidential Data Disclosure"}, "threat_synthesis": {"affected_systems": "The affected product is LinkAce from Kovah. Versions earlier than 2.5.3 are vulnerable. Version 2.5.3 and later contain a fix that correctly enforces note visibility on the web link detail page.", "description_and_impact": "A flaw in the web interface of LinkAce allows an authenticated user to view private notes attached to a non\u2011private link owned by another user. The note content is rendered without applying the same visibility checks as the API, resulting in disclosure of confidential information. This weakness, classified as CWE-285, enables an attacker with any user account to read private data belonging to other users, violating confidentiality.", "risk_and_exploitability": "The CVSS base score is 6.5, indicating a moderate severity, and the EPSS score is below 1%, suggesting a low probability of exploitation in the wild. The vulnerability is not listed in CISA\u2019s KEV catalogue. Exploitation requires only an authenticated user with access to the web interface; the attacker does not need elevated privileges or code execution. Consequently, any legitimate user can readily trigger the data disclosure by visiting a link\u2019s detail page, making the risk significant for organizations that rely on private notes for sensitive information."}}}}, "created": "2026-03-29T20:29:40.760143+00:00", "updated": "2026-03-31T20:00:38.037767+00:00", "vendors": ["kovah", "kovah$PRODUCT$linkace"]}