MediumVulnerability
CVE-2026-45046: Gryph logs sensitive file writes to local sqlite database by default
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-45046
- Published
- Record updated
- Affected
- github.com/safedep/gryph <= 0.6.0
- Fixed in
- 0.7.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-45046 affects Gryph, a security layer for AI coding agents, in versions prior to 0.7.0. At the default standard logging level and at full, sensitive file-write content is stored in the local sqlite database as ContentPreview, OldString, or NewString, bypassing the sensitive file filter and log level contracts. The README wrongly states the default log level is minimal when it is standard.
Mitigation
Fixed in 0.7.0.
Topics
Related items
- InfoPrivacy Risks and Leakage Pathways in Agentic and Multi-Agent AI SystemsSimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
- LowGHSA-3gh4-cghq-f8v4: Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`Similar attack · GitHub Advisory Database
- LowGHSA-4x9p-g9wm-8q7f: Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`Similar attack · GitHub Advisory Database
- LowSeptember 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure RiseSimilar attack · Check Point Research
- InfoA novel privacy-preserving large language model integrating trust-weighted and ethical gradient maskingSimilar attack · OpenAlex (peer-reviewed AI security)