CVE-2026-113613

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

EUVD-2026-105091

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

CVE-2026-113613

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

CVE-2026-113613

FlexGet versions before 3.20.7 are vulnerable to a path traversal (Zip Slip) vulnerability within the decompress plugin . A remote attacker can exploit this by providing malicious zip or rar archives containing ../ sequences or absolute paths through a feed. This allows the attacker to write arbi...

CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...

PT-2026-118473

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID: CVE-2026-113613 Vendor: Unknown Severity: Critical — CVSS 9.2 Product: Unknown Date: 2026-10-20 A critical vulnerability Path Traversal has been disclosed affecting Unknown. Patch immediately...

FlexGet path traversal vulnerability

Versions of FlexGet prior to 3.20.7 have a path traversal vulnerability. This vulnerability stems from the decompress plugin, which has a path traversal flaw. Attackers can use feeds that contain zip or rar archives with "../ sequences or absolute paths" to write arbitrary files. This may result ...