CVE-2026-53976

OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...

PT-2026-68525

Name of the Vulnerable Software and Affected Versions OpenChamber version 1.11.7 Description An issue exists in the file-serving endpoints '/api/fs/read', '/api/fs/stat', and '/api/fs/raw' that allows unauthenticated remote attackers to read arbitrary files. By providing an absolute path and...