In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an...

0.71

github-advisories · v1 · published 11/3/2026, 12:31:48 PM · modified 11/3/2026, 12:31:53 PM · TLP:CLEAR

offsec.vulnerability

Source evidence ↗

Entities

ghsa: GHSA-c7g8-f337-8fr6cwe: CWE-522cve: CVE-2026-89292

Assessment

Fact summary

low · heuristic

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

Technical delta

low · heuristic

Automated delta unavailable (heuristic mode).

Defensive significance

low · heuristic

None identified (heuristic mode).

Extracted text

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.