we-mp-rss CVE-2026-110617

Exploitation requires the /api/v1/wx/tools/export/download endpoint to be network-reachable and, per the source, succeeds without authentication because the endpoint's auth dependency is commented out. The attacker must supply a valid mp_id and correctly guess the timestamp-based filename of an export archive stored under data/docs - meaning a target export archive must already exist on the server. The key LIMITING factor (reflected as AT:P in the CVSS 4.0 vector) is this filename-guessing requirement: predictable timestamp-based names make it feasible but not guaranteed. No user interaction and no privileges are required. Setting delete_after_download=true additionally destroys the archive, adding a low availability/data-loss impact.

This is a moderate, context-dependent risk rather than a top-priority emergency. The CVSS 4.0 score of 6.3 (Medium) reflects an unauthenticated network-reachable flaw (AV:N, PR:N, UI:N) but with an explicit Attack Requirement (AT:P) that caps severity - the attacker must guess a timestamp-based export filename, so exploitation is not deterministic. Impact is limited to low confidentiality (VC:L) and low availability (VA:L: archive deletion), with no integrity impact. No EPSS score, CISA KEV listing, or confirmed public exploit code was supplied in the input, so there is no evidence of active exploitation or automated mass scanning; a hackmd write-up is referenced but its PoC status is not confirmed in the data. The combination of a niche open-source product, a non-default precondition (an export archive must already exist on disk), and the filename-guessing requirement makes this a lower real-world priority than the 'unauthenticated' label alone suggests. Treat as a patch-in-normal-cycle issue for the small population of deployed instances, not an immediate crisis.

An attacker who can reach a self-hosted we-mp-rss instance (<=1.5.3) sends an unauthenticated request to /api/v1/wx/tools/export/download, supplying an mp_id and a guessed timestamp-based filename corresponding to a previously generated export archive under data/docs. If the guess matches an existing archive, the attacker downloads its contents and can set delete_after_download=true to destroy the archive on the server. A hackmd write-up is referenced but confirmed public exploit code is not indicated in the provided data.