{"data":{"id":"444359f3-57b4-4c4e-baf3-9f29143d1153","title":"CVE-2026-45046: Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements logging levels that determine…","summary":"CVE-2026-45046 affects Gryph, a security layer for AI coding agents, in versions prior to 0.7.0. At the default standard logging level and at full, sensitive file-write content is stored in the local sqlite database as ContentPreview, OldString, or NewString, bypassing the sensitive file filter and log level contracts. The README wrongly states the default log level is minimal when it is standard.","solution":"Fixed in 0.7.0.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45046","publishedAt":"2026-05-27T19:16:21.793Z","cveId":"CVE-2026-45046","cweIds":["CWE-212"],"cvssScore":"5.5","cvssSeverity":"medium","severity":"medium","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":["github.com/safedep/gryph@<= 0.6.0 (fixed: 0.7.0)"],"affectedPackageNames":["github.com/safedep/gryph"],"affectedPackageRefs":["go:github.com/safedep/gryph"],"affectedVendors":[],"affectedVendorsRaw":["Gryph","AI coding agents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Gryph logs sensitive file writes to local sqlite database by default","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00151,"epssCheckedAt":"2026-10-14T06:09:06.797Z","kevDateAdded":null,"advisoryAliases":["GHSA-f3jg-756w-gm35"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:04.569Z","patchAvailable":true,"disclosureDate":"2026-05-27T19:16:21.793Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}