CVE-2026-116067
Received Received - Intake

Path Traversal in Paisa Before 0.7.8

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and delete_backups endpoints to read any server-readable file and remove backup files outside the journal or sheets directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116067
EUVD
EUVD-2026-109381

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ananthakumaran paisa 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-116067 is a path traversal vulnerability in Paisa before version 0.7.8. It affects handlers like GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups, allowing unauthenticated attackers to read arbitrary files or delete backups by using ../ sequences in filenames. This lets attackers escape intended directories and access sensitive server files or remove backups outside designated folders.

Detection Guidance

To detect this vulnerability, check if your Paisa instance is running a version before 0.7.8. Use commands like 'curl -s http://your-paisa-server/editor/file?filename=../etc/passwd' to test for path traversal. If the server returns sensitive files, it is vulnerable.

Impact Analysis

This vulnerability allows attackers to read any server-readable file, including sensitive data like SSH keys or configuration files. It also lets them delete backup files outside intended directories, potentially causing data loss. If the server lacks authentication, attackers can exploit this without credentials. Even with authentication, arbitrary file reads remain possible.

Mitigation Strategies

Upgrade Paisa to version 0.7.8 or later immediately. Verify the fix by testing path traversal attempts again. Ensure no unauthorized file access or backup deletions occurred before the upgrade.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116067. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart