Frappe Framework EUVD-2026-36490

No special conditions are required - the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms remote unauthenticated exploitation against default configurations of Frappe. Any internet-exposed Frappe instance running a vulnerable version (prior to 15.107.2 or 16.17.4) is susceptible without any prerequisite authentication, non-default feature enablement, or user interaction. Exploitation is limited in impact by the read-only nature of the disclosure (no write access, no code execution), and the information returned is schema-level metadata rather than row-level data. Attackers cannot directly exfiltrate records via this vulnerability alone - it functions as a reconnaissance primitive rather than a terminal exploit.

The CVSS 4.0 score of 6.9 (Medium) is driven by the network-accessible, unauthenticated, zero-complexity attack surface (AV:N/AC:L/AT:N/PR:N/UI:N), but is moderated by the low confidentiality impact (VC:L) and complete absence of integrity or availability impact (VI:N/VA:N/SC:N/SI:N/SA:N). EPSS at 0.02% (7th percentile) corroborates low exploitation activity at this time - attackers have not prioritized this path. There is no CISA KEV listing and no public exploit code identified. The realistic risk is therefore low as a standalone vulnerability, but non-trivial in combination with other weaknesses: schema knowledge reduces the effort required for SQL injection, data harvesting, or targeted API abuse. The vulnerability is not a KEV-priority patch but should be addressed in routine maintenance cycles given the trivially low exploitation bar (unauthenticated, no complexity).

An unauthenticated attacker sends a crafted HTTP request to the vulnerable Frappe endpoint from any internet-accessible client. The endpoint responds with database schema information - table names, column definitions - without requiring a session token or credentials. The attacker uses this schema map to identify high-value tables (e.g., user credentials, financial records) and subsequently crafts targeted injection or enumeration attacks against those specific endpoints.