ETK-2026-939Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-939",
  "cve_id": null,
  "display_id": "ETK-2026-939",
  "ghsa_id": "GHSA-j3g4-7qf7-6p9q",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Cross-tenant template disclosure in eneo",
  "summary": "Eneo versions before 2.2.0 may expose private assistant-template prompt content across tenant boundaries during template-based assistant creation. An authenticated user who is allowed to create an assistant and can identify another tenant's template may cause that content to be copied into an assistant they control.",
  "mitigation": "Upgrade eneo to version 2.2.0 or later. Until upgraded, restrict template-based assistant creation to trusted users and limit access to template identifiers.",
  "vendor": "other",
  "product": "other:eneo",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 2.2.0-rc.5"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "2.2.0"
      ],
      "package_name": "eneo",
      "purl": null
    }
  ],
  "cwes": [
    639
  ],
  "cvss_score": 7.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 60.04576196666667,
  "t0_at": null,
  "signals": {
    "public_poc": {
      "at": "2026-10-07T07:42:51+00:00",
      "days": -14.541403781979167,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T20:42:28.310158+00:00",
      "url": "https://github.com/eneo-ai/eneo/security/advisories/GHSA-j3g4-7qf7-6p9q"
    },
    "trigger_signal": {
      "at": "2026-10-07T07:42:51+00:00",
      "days": -14.541403781979167,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T20:42:28.310158+00:00",
      "url": "https://github.com/eneo-ai/eneo/security/advisories/GHSA-j3g4-7qf7-6p9q"
    }
  }
}