Is CVE-2026-110775 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-110775 being exploited in the wild.

How severe is CVE-2026-110775?

Medium severity, with a CVSS score of 6.5, published 14 October 2026.

Which products and versions are affected?

ModelEngine-Group Nexent through 2.7.0.

Is there a fix for CVE-2026-110775?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-110775 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-110775?

Check whether you run ModelEngine-Group Nexent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110775: Nexent missing authorization in file access

CVE-2026-110775 · Severity: medium · CVSS 6.5 · Published 2026-10-14

Nexent is a zero-code platform for building AI agents. The vulnerability allows authenticated users in a multi-tenant deployment to read or download knowledge-base files belonging to other tenants by bypassing authorization checks in the file management system. An attacker with valid credentials could access sensitive documents and information from competing teams or organizations within the same Nexent instance.

Technologies: ModelEngine-Group Nexent. Vendors: ModelEngine-Group.

Quick answers

Is CVE-2026-110775 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-110775 being exploited in the wild.
How severe is CVE-2026-110775?: Medium severity, with a CVSS score of 6.5, published 14 October 2026.
Which products and versions are affected?: ModelEngine-Group Nexent through 2.7.0.
Is there a fix for CVE-2026-110775?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-110775 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-110775?: Check whether you run ModelEngine-Group Nexent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The check_file_access function in file_management_service.py fails to enforce tenant isolation for knowledge_base/ file operations. Authenticated attackers can leverage GET /file/storage to list presigned URLs or GET /file/download/{object_name} to download files from other tenants. The vulnerability requires valid authentication but no additional user interaction.

Affected products

ModelEngine Group Nexent through 2.7.0

Timeline

2026-10-14: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.