CVE-2026-49988: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in yamadashy repomix
Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attach_packed_output and read_repomix_output flow can register and read arbitrary local .json, .txt, .md, or .xml files without the file_system_read_file runSecretLint() safety check or Repomix packed-output validation, allowing MCP callers to bypass the local file-read secret-scanning boundary. This issue is fixed in version 1.14.1.
AI Analysis
Technical Summary
CVE-2026-49988 describes an information exposure vulnerability in yamadashy repomix versions before 1.14.1. The Repomix MCP server functions attach_packed_output and read_repomix_output can register and read arbitrary local files with extensions .json, .txt, .md, or .xml without enforcing the file_system_read_file runSecretLint() safety check or validating the packed output. This allows callers with local privileges to bypass secret-scanning protections and access sensitive local files. The vulnerability is resolved in repomix version 1.14.1.
Potential Impact
An attacker with local privileges can read arbitrary local files of certain types, potentially exposing sensitive information that should be protected by secret-scanning boundaries. This could lead to unauthorized disclosure of confidential data stored in .json, .txt, .md, or .xml files on the affected system.
Mitigation Recommendations
Upgrade repomix to version 1.14.1 or later, where this vulnerability is fixed. No other official remediation or temporary fixes are documented. Patch status is not explicitly confirmed beyond the fix in 1.14.1, so users should verify vendor advisories for the latest guidance.
CVE-2026-49988: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in yamadashy repomix
Description
Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attach_packed_output and read_repomix_output flow can register and read arbitrary local .json, .txt, .md, or .xml files without the file_system_read_file runSecretLint() safety check or Repomix packed-output validation, allowing MCP callers to bypass the local file-read secret-scanning boundary. This issue is fixed in version 1.14.1.
CVSS v4.0
Score 6.8medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-49988 describes an information exposure vulnerability in yamadashy repomix versions before 1.14.1. The Repomix MCP server functions attach_packed_output and read_repomix_output can register and read arbitrary local files with extensions .json, .txt, .md, or .xml without enforcing the file_system_read_file runSecretLint() safety check or validating the packed output. This allows callers with local privileges to bypass secret-scanning protections and access sensitive local files. The vulnerability is resolved in repomix version 1.14.1.
Potential Impact
An attacker with local privileges can read arbitrary local files of certain types, potentially exposing sensitive information that should be protected by secret-scanning boundaries. This could lead to unauthorized disclosure of confidential data stored in .json, .txt, .md, or .xml files on the affected system.
Mitigation Recommendations
Upgrade repomix to version 1.14.1 or later, where this vulnerability is fixed. No other official remediation or temporary fixes are documented. Patch status is not explicitly confirmed beyond the fix in 1.14.1, so users should verify vendor advisories for the latest guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-02T18:30:51.282Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a57d26668715ace4339246e
Added to database: 07/15/2026, 18:33:10 UTC
Last enriched: 07/22/2026, 22:48:35 UTC
Last updated: 08/28/2026, 22:52:11 UTC
Views: 68
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.