EUVD-2026-53206

audiobookshelf's authentication-exemption check server/routers/Auth.js matches unauthenticated-allowed GET routes against req.path via a regex requiring a literal /items/:id/cover or /authors/:id/image shape, where req.path retains %2F sequences URL-encoded. Express's router decodes the :id route...

PT-2026-68128

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A critical flaw allows unauthenticated attackers to read any file accessible to the Gitea service account by using crafted Org-mode markup in a public repository. This issue can be chained to...

PT-2026-68024

Name of the Vulnerable Software and Affected Versions The-Pocket/PocketFlow affected versions not specified Description The pocketflow-coding-agent cookbook example implements a pathworkdir, p helper function that acts as a simple wrapper for os.path.joinworkdir, p without performing...

PT-2026-68053

Name of the Vulnerable Software and Affected Versions art-template affected versions not specified Description Sub-template resolution logic in src/compile/adapter/resolve-filename.js, utilized by the include and extend template directives, fails to verify if the resolved file path remains within...

PT-2026-68047

Name of the Vulnerable Software and Affected Versions Audiobookshelf affected versions not specified Description An authentication bypass exists in the authentication-exemption check within server/routers/Auth.js. The system validates unauthenticated GET routes against req.path using a regex that...

CVE-2026-71209: Improper Limitation of a Pathname to a Restricted Directory

audiobookshelf's authentication-exemption check server/routers/Auth.js matches unauthenticated-allowed GET routes against req.path via a regex requiring a literal /items/:id/cover or /authors/:id/image shape, where req.path retains %2F sequences URL-encoded. CacheManager.handleCoverCache then joi...

CVE-2026-7646: Improper Limitation of a Pathname to a Restricted Directory

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP resources/read request with a URL-encoded path...

PT-2026-68121

Name of the Vulnerable Software and Affected Versions Eclipse Theia versions prior to 1.73.2 Description The @theia/filesystem backend exposes HTTP file-download endpoints GET /file, GET /files/, and PUT /files/ that convert a client-supplied URI directly to a filesystem path and stream the file...

CVE-2026-34966: Server-Side Request Forgery (SSRF)

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get without a custom DialContext. Attackers can supply...

CVE-2026-70436: Missing Authorization

Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check 1.4.0 and earlier or performs an improper permission check 1.4.1 when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to...

CVE-2026-12609: Improper Limitation of a Pathname to a Restricted Directory

In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the @theia/plugin-ext backend exposes the /hostedPlugin/:pluginId/:path HTTP endpoint, which resolves the requested file path with path.resolvelocalPath, filePath without verifying that the resolved path stays within the plugin's...

PT-2026-81370

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description The serve s3 function contains a path traversal flaw. This allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. By sending requests with object keys su...

PT-2026-68253

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An issue allows users to read arbitrary files from the server filesystem by sending a crafted MCP resources/read request. By using a URL-encoded path traversal sequence in the filename...

CVE-2026-47487

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...

CVE-2026-58075

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally...

EUVD-2026-52756

A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally...

GHSA-VMV7-4M6C-3CG5 Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

UPDATE 2026-05-20: Full RCE as root VERIFIED This is not theoretical — a Meterpreter reverse shell session as root has been established on Flowise 3.1.2. Verified Exploit Chain 1. Python code injection via base64string = "$base64String" CSVAgent.ts line 161 2. Pyodide js bridge provides access to...

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

UPDATE 2026-05-20: Full RCE as root VERIFIED This is not theoretical — a Meterpreter reverse shell session as root has been established on Flowise 3.1.2. Verified Exploit Chain 1. Python code injection via base64string = "$base64String" CSVAgent.ts line 161 2. Pyodide js bridge provides access to...

CVE-2026-69110

OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...

CVE-2026-69110 OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music

OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...