CVE-2026-123534: tornadoweb tornado: Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.static_url() and get_version() that allows…

Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.staticurl and getversion that allows attackers to hash files outside staticpath using ../ sequences. Attackers controlling input passed to staticurl can obtain SHA-512 hashes of readable files to confirm their existence,...