CVE-2026-111935: External Control of File Name or Path in codexu NoteGen

CVE-2026-111935 describes an external control of file name or path vulnerability in codexu NoteGen through version 0.38.3. The flaw exists in the chat image analysis feature, where unvalidated synced sourceUrl paths allow an attacker with write access to the victim's sync target to specify absolute paths or file:// URLs. This causes the image_inspect component to send local image files to the AI provider, potentially exposing sensitive local images. The CVSS 4.0 base score is 2.1, reflecting low severity due to the required privileges and attack complexity.

An attacker who has write access to the victim's sync target can exploit this vulnerability to cause NoteGen to read and send local image files to an external AI provider. This could lead to unintended disclosure of local images. However, exploitation requires the attacker to have prior write access to the victim's sync target, limiting the scope of impact. No known exploits are reported in the wild.

No official patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write access to the sync target to trusted parties only to prevent exploitation.