CVE-2026-50870 is an information disclosure vulnerability affecting whoogle-search version 1.2.3. The issue resides in the configuration endpoint, which improperly exposes sensitive information when accessed with a specially crafted GET request. This vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to confidentiality. No patch or official fix has been documented in the provided data.

Successful exploitation of this vulnerability allows an unauthenticated attacker to retrieve sensitive configuration information from the affected whoogle-search instance. This could lead to further attacks or information leakage depending on the nature of the disclosed data. There is no indication of integrity or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the configuration endpoint to trusted users only and monitor for suspicious GET requests targeting this endpoint.