CVE-2026-50813

MEDIUM

SQLite < 869a51ae84df - Information Disclosure via Session Extension Changegroup Merge Path

Title source: llm
STIX 2.1

Description

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

Scores

CVSS v3 6.1
EPSS 0.0011
EPSS Percentile 1.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-126
Status published
Published Jul 08, 2026
Tracked Since Jul 08, 2026