This vulnerability (CVE-2026-65458) affects Chouby Polylang and Polylang Pro versions up to and including 3.8.5. It is classified as CWE-497, indicating exposure of sensitive system information to an unauthorized control sphere. The issue allows unauthorized retrieval of embedded sensitive data from the affected software. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impact limited to confidentiality loss only. No official fix or patch has been published as of the data provided.

An attacker with low privileges can remotely access sensitive system information embedded within the Polylang or Polylang Pro software, potentially leading to information disclosure. The impact is limited to confidentiality loss; integrity and availability are not affected. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected software and monitor for unusual access patterns to sensitive data. Avoid exposing the affected versions to untrusted networks where possible.