CVE-2026-55086

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...

CVE-2026-55086

creationtimestamp| type| source ---|---|--- 2026-08-13 16:35:14+00:00| published-proof-of-concept| https://github.com/ether/etherpad/security/advisories/GHSA-2jwf-f4xq-f24h...