CVE-2026-69095
Received Received - Intake

Path Traversal in OpenWrt luci-app-bmx7

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: VulnCheck

Description
OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticated attackers to read files outside the configured runtimeDir. Attackers can supply directory traversal sequences in the query string to escape the intended directory and read sensitive files accessible to the CGI process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-69095
EUVD
EUVD-2026-52288

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openwrt luci-app-bmx7 to 5890760a454dad2cb00389dba2cdc5e779e0ffdd (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path traversal issue in OpenWrt's luci-app-bmx7 before a specific commit. It exists in the bmx7-info CGI script, allowing unauthenticated attackers to read files outside the intended runtime directory by using directory traversal sequences in query strings.

Detection Guidance

To detect this vulnerability, check if OpenWrt with luci-app-bmx7 is installed and review the bmx7-info CGI script for path traversal attempts in logs. Look for unusual file access patterns or query strings containing sequences like '../' targeting the bmx7-info endpoint.

Impact Analysis

Attackers could exploit this to access sensitive files on the system that the CGI process can read. This may lead to unauthorized data exposure, system information leaks, or further compromise depending on the files accessed.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) or HIPAA (health information privacy) if such data is exposed. Compliance may be impacted if the affected system handles regulated data.

Mitigation Strategies

Immediately update OpenWrt and luci-app-bmx7 to the latest commit (5890760a454dad2cb00389dba2cdc5e779e0ffdd or later) to patch the path traversal flaw. Disable the bmx7-info CGI script if not needed and restrict file system permissions for the CGI process.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69095. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart