CVE-2026-108591
MediumCVSS 4.4Summary
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.
Risk Assessment
An attacker could access critical configuration files, including application keys and database credentials, potentially leading to full system compromise. However, this requires administrator privileges.
Recommendation
Update InnoShop to a version later than 0.9.2 that fixes the vulnerability. Additionally, consider restricting files_create permissions and validating arguments passed to file_get_contents().
Other vulnerabilities in InnoShop
See all- CVE-2026-18959Medium
InnoShop up to version 0.8.2 contains a path traversal vulnerability in the FileManagerController::destroyFiles function in the Files Endpoint component. The attack can be initiated remotely, and an exploit has been published.
- CVE-2026-39250High
Innoshop 0.6.0 has an authorization vulnerability. After logging into the frontend, an attacker can directly access backend application interfaces, leading to further dangerous operations.
Original NVD description (English source)
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS