CVE-2026-123534

Tornado versions prior to 6.6 are vulnerable to a path traversal vulnerability within the RequestHandler.static_url() and get_version() functions. This flaw allows an attacker who can control input passed to static_url() to use ../ sequences to access files outside the intended static_path. Speci...

EUVD-2026-119419

Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.staticurl and getversion that allows attackers to hash files outside staticpath using ../ sequences. Attackers controlling input passed to staticurl can obtain SHA-512 hashes of readable files to confirm their existence,...

CVE-2026-123534: tornadoweb tornado: Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.static_url() and get_version() that allows…

Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.staticurl and getversion that allows attackers to hash files outside staticpath using ../ sequences. Attackers controlling input passed to staticurl can obtain SHA-512 hashes of readable files to confirm their existence,...