{"data":{"id":"78b95183-57d4-48af-a407-3833ea136096","title":"CVE-2026-44187: A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with…","summary":"CVE-2026-44187 is a flaw in the Ansible Lightspeed extension for Visual Studio Code. It stores the Google Gemini API key in plain text in the user's configuration file and writes it to output log files, where a local attacker or malware running with the user's privileges can read it. Exploitation can expose the credential and let an attacker consume the user's API quota.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44187","publishedAt":"2026-07-22T12:17:59.690Z","cveId":"CVE-2026-44187","cweIds":["CWE-256"],"cvssScore":"3.3","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Ansible Lightspeed extension for Visual Studio Code","Google Gemini API"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00127,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-fxgw-9xvp-9r43"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-02T12:08:53.041Z","patchAvailable":null,"disclosureDate":"2026-07-22T12:17:59.690Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}