GenOffice through 0.11.505 contains an improper permissions flaw in its HTTP MCP server file store that permits local unprivileged users to read uploaded and generated documents. By listing the world‑readable genoffice‑mcp‑http directory under the system temporary directory, an attacker can bypass the HTTP bearer token and access client uploads and conversion outputs. This results in local disclosure of potentially sensitive documents tied to the CWE‑732 weakness.

The affected product is GenOffice from genspark‑ai, any release up to and including 0.11.505. The issue manifests when the application runs its HTTP MCP server and writes files to the temporary directory on the host system.

The CVSS score of 6.8 indicates moderate severity. With no EPSS data and the vulnerability not listed in the CISA KEV catalog, the immediate exploitation probability is unclear, but the attack vector is local: an attacker must have user access to the host. Once local access is obtained, the flaw allows read access to the temporary file store, presenting a straightforward path to information disclosure.