CVE-2026-50813 PUBLISHED

Assigner: mitre
Reserved: 07.06.2026 Published: 08.07.2026 Updated: 08.07.2026

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AC:L/AV:L/A:H/C:L/I:N/PR:N/S:U/UI:R
CVSS Score: 6.1

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	None	Integrity Impact	None
User Interaction	Required	Availability Impact	High

CVSS 3.1

Product Status

Vendor	n/a
Product	n/a
Versions	Version n/a is affected

References

https://sqlite.org/src/info/869a51ae84df
https://github.com/sqlite/sqlite/commit/c597ed79d1bd03f57198d10d1f431adda293cf2e
https://gist.github.com/junius-sec/f8acb66bafb80134c8e1a1c8c7c9f4f4

Problem Types

n/a text