CVE-2026-67449

Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler app/api/tus/hooks/route.ts allowed an unauthenticated attacker to...

CVE-2026-67449

Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler app/api/tus/hooks/route.ts allowed an unauthenticated attacker to...

CVE-2026-67449

The database backup and restore tool Portabase is vulnerable to an unauthenticated path traversal in the TUS upload webhook handler (app/api/tus/hooks/route.ts) in versions prior to 1.21.2 . An attacker can exploit this flaw to overwrite arbitrary files within the private data directory, specific...

EUVD-2026-124051

Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler app/api/tus/hooks/route.ts allowed an unauthenticated attacker to...

CVE-2026-67449 Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master key

Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler app/api/tus/hooks/route.ts allowed an unauthenticated attacker to...

PT-2026-145526

Name of the Vulnerable Software and Affected Versions Portabase versions prior to 1.21.2 Description A path traversal issue exists in the TUS upload webhook handler at the endpoint "app/api/tus/hooks/route.ts". This allows an unauthenticated remote attacker to overwrite arbitrary files within the...

CVE-2026-67449: portabase: Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB,…

Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler app/api/tus/hooks/route.ts allowed an unauthenticated attacker to...