CVE-2026-66377 is a medium severity vulnerability where an unauthenticated user can access restricted repository information under certain conditions. The flaw does not require privileges or user interaction and impacts confidentiality but not integrity or availability.