CVE-2026-25059
Path Traversal in OpenList Frontend Enables Unauthorized File Access
Publication date: 2026-02-02
Last updated on: 2026-02-23
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oplist | openlist | to 4.1.10 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-22 | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a path traversal issue in OpenList Frontend versions prior to 4.1.10. It occurs because filename components are concatenated with directories without properly handling '..' sequences, allowing attackers to bypass directory restrictions. An authenticated attacker can inject traversal sequences to access or manipulate files belonging to other users within the same storage mount, including unauthorized deletion, renaming, or copying of files.
How can this vulnerability impact me? :
The vulnerability can allow an authenticated attacker to bypass directory-level authorization controls and perform unauthorized actions such as accessing, deleting, renaming, or copying files of other users within the same storage mount. This can lead to data loss, data leakage, and unauthorized modification of files, potentially compromising the integrity and confidentiality of user data.
What immediate steps should I take to mitigate this vulnerability?
Upgrade OpenList Frontend to version 4.1.10 or later, as this version contains the fix for the path traversal vulnerability. Additionally, restrict access to the application to authenticated users only and monitor file operations for suspicious activity until the upgrade is applied.