CVE-2026-114574: Information Disclosure in massCodeIO massCode

This vulnerability in massCode 5.10 involves an information disclosure flaw in the Local HTTP Service component, specifically in the file src/main/api/index.ts. The flaw allows remote attackers to obtain sensitive information without authentication or user interaction. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity), indicating a network attack vector with low complexity and no privileges required. A patch is available as referenced by the commit d25d8fa3f5a1e34285c8634f18729650c0c05cda, and it is recommended to apply it to mitigate the risk.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of information from the affected system. The vulnerability is remotely exploitable without any privileges or user interaction, which increases its risk profile. However, the impact is limited to information disclosure with no indication of further compromise such as integrity or availability loss.

A patch identified by commit d25d8fa3f5a1e34285c8634f18729650c0c05cda is available and should be applied promptly to remediate this vulnerability. No additional vendor advisory content is provided, so it is advisable to verify the patch status with the vendor or official sources before deployment.