Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115801— Kakao khaiii JSON Config File Linear.cpp open out-of-bounds

Quick assessment

Affected
Kakao khaiii
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Kakao khaiii 0.4 及以下版本中发现了一个安全漏洞。受影响的组件是 JSON 配置文件处理器，具体位于文件 中的函数 。该漏洞源于对参数 或 的恶意操纵，可导致越界读取。利用此漏洞需要本地访问权限。目前，相关利用代码已公开，可能被用于实际攻击。 厂商说明如下："khaiii 将资源目录（ ）视为可信输入，类似于二进制文件或共享库。要利用此缺陷，攻击者必须已具备向该目录写入的权限。在拥有该权限的情况下，攻击者即使不依赖此缺陷，也能篡改分析结果。” 该漏洞仅影响维护者已不再提供支持的产品。

CVSS 5.3 · Medium

Possible ATT&CK Techniques 1 AI

T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115801

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/class_num results in out-of-bounds read. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor explains: "khaiii treats the resource directory (--rsc-dir) as trusted input, like a binary or a shared library. To use this defect, an attacker must already be able to write to that directory. With that access, an attacker can change the analysis results without this defect." This vulnerability only affects products that are no longer supported by the maintainer.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Kakao khaiii 0.1 cpe:2.3:a:kakao:khaiii:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-115801

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115801

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-115801 (1)

Other References for CVE-2026-115801 (1)

IV. Related Vulnerabilities

Same vendor: Kakao
Same weakness: CWE-125

V. Comments for CVE-2026-115801

No comments yet

Leave a comment