CVE-2026-116213

The Webasyst Framework (through version 4.4.0 ) is vulnerable to an arbitrary file read vulnerability within the waArchiveTar::writeItem() function. The root cause is a failure to validate link targets when creating symlinks from theme archives. An authenticated user with theme management rights ...