CVE-2026-50813

medium

Description

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

References

https://sqlite.org/src/info/869a51ae84df

https://github.com/sqlite/sqlite/commit/c597ed79d1bd03f57198d10d1f431adda293cf2e

https://gist.github.com/junius-sec/f8acb66bafb80134c8e1a1c8c7c9f4f4

Details

Source: Mitre, NVD

Published: 2026-07-08

Updated: 2026-07-09

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N