CVE-2026-39669

CVE-2026-39669 is a missing authorization vulnerability affecting NitroPack versions up to 1.19.3 that allows attackers to exploit incorrectly configured access control security levels. The vulnerability enables unauthorized information disclosure through a network-based attack that requires no special privileges or user interaction. With a CVSS score of 5.3 (Medium severity), the vulnerability has a low attack complexity and low exploitation likelihood, as evidenced by an EPSS score of 0.00037 indicating minimal real-world exploitation activity. The vulnerability is not currently tracked on the Known Exploited Vulnerabilities list and has not attracted significant community attention. Organizations running affected NitroPack versions should prioritize updating to version 1.19.4 or later, though the low exploitation probability suggests this is not an immediate critical threat.