CVE-2026-52100

Deferred Deferred - Pending Action

Cross-Site Request Forgery in Linux Server 1.0 to 2.3.8

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: MITRE

Description

Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary code via the uploadPutHandler function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-52100

Affected Vendors & Products

Vendor	Product	Version / Range
andreimarcu	linux-server	From 1.0 (inc) to 2.3.8 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a Cross Site Request Forgery (CSRF) vulnerability in the andreimarcu linux-server software versions 1.0 through 2.3.8. It allows a remote attacker to execute arbitrary code by exploiting the uploadPutHandler function.

Detection Guidance

This vulnerability is a Cross Site Request Forgery (CSRF) issue in andreimarcu linux-server versions 1.0 through 2.3.8. Detection requires checking for unauthorized file uploads via the vulnerable uploadPutHandler function. Inspect server logs for unexpected POST requests to upload endpoints and verify if file uploads occur without proper CSRF tokens or referer checks. No specific commands are provided in the context.

Impact Analysis

An attacker could trick a user into performing unintended actions on the server, such as uploading malicious files or executing unauthorized commands. This could lead to system compromise, data theft, or further attacks on the network.

Compliance Impact

The CSRF vulnerability allows remote attackers to execute arbitrary code via the uploadPutHandler function, which could lead to unauthorized data manipulation or access. This may violate GDPR by enabling unauthorized processing of personal data and HIPAA by compromising protected health information integrity.

Mitigation Strategies

Update linux-server to the latest version beyond v2.3.8 to remove the vulnerable uploadPutHandler function. If an update is unavailable, disable or restrict file upload functionality in the application configuration.

Hi! I’m here to help you understand CVE-2026-52100. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70