{"id":"CVE-2026-89292","published":"2026-11-03T10:17:20.077","lastModified":"2026-11-03T21:17:45.263","description":"In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-522","CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/302","tags":[]},{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/773","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}