Medium severity5.3NVD Advisory· Published Nov 2, 2026

CVE-2026-120501

Description

An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attackers who can edit pages, including anonymous users under the default configuration, to read repository-internal files. Attackers can set an absolute src such as /.git/config to render the file as a table, exposing any stored remote credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Otter Wiki/Otter Wikillm-create
Range: <2.26.2
Redimp/otterwikillm-create
Range: <2.26.2

Patches

Vulnerability mechanics

References

github.com/redimp/otterwiki/commit/263cac4981f60d92c46adf6386591cf4bc4d6835nvd
github.com/redimp/otterwiki/releases/tag/v2.26.2nvd
www.vulncheck.com/advisories/an-otter-wiki-2.20.1-before-2.26.2-repository-file-disclosure-via-datatable-srcnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000