CVE-2026-108591 Details

A local file disclosure vulnerability has been identified in InnoShop version 0.9.2. This issue allows authenticated administrators with the 'files_create' permission to read server files. The vulnerability arises from the AI Core MCP file_upload tool, which accepts a 'source' argument that can be manipulated to include 'file://' or 'php://' stream wrappers. These wrappers are passed to 'file_get_contents()', enabling the extraction of sensitive files such as the .env file, which contains the application key and database credentials. The extracted files are stored on the public media disk, where they can be accessed via a publicly retrievable URL.

The vulnerability can be remediated by adding a scheme check to the 'source' argument in the 'FileUploadTool' class, ensuring that only 'http' and 'https' URLs are accepted. Additionally, the 'file_upload' tool should be modified to store uploaded files privately, rather than on the public media disk, and to validate the content type of fetched files against their declared MIME type.