GO-2026-5827 gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host in go.senan.xyz/gonic

🗓️ 07 Jul 2026 15:26:32Reported by GoogleType

osv🔗 osv.dev👁 4 Views

GO-2026-5827: Authenticated users can write playlist content to attacker-controlled paths via createPlaylist in Gonic.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2026-49340	19 Jun 202619:11	–	attackerkb
Circl	CVE-2026-49340	26 Jun 202623:42	–	circl
CVE	CVE-2026-49340	19 Jun 202619:11	–	cve
Cvelist	CVE-2026-49340 gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host	19 Jun 202619:11	–	cvelist
EUVD	EUVD-2026-38068	26 Jun 202623:21	–	euvd
Github Security Blog	gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host	26 Jun 202623:21	–	github
NVD	CVE-2026-49340	19 Jun 202619:16	–	nvd
OSV	CVE-2026-49340 gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host	19 Jun 202619:11	–	osv
OSV	GHSA-4GXV-P5G5-J7W7 gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host	26 Jun 202623:21	–	osv
Positive Technologies	PT-2026-51013	19 Jun 202600:00	–	ptsecurity