CVE-2026-71518

Received Received - Intake

Authorization Bypass in Typemill via Path Normalization

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: VulnCheck

Description

Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms such as dot-slash prefixes, double slashes, or percent-encoded sequences to pass role-based restriction checks while the filesystem resolves the request to the protected file, enabling unauthorized file download without credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-17

Generated

2026-08-18

AI Q&A

2026-08-18

EPSS Evaluated

N/A

NVD

CVE-2026-71518

Affected Vendors & Products

Vendor	Product	Version / Range
typemill	typemill	to 2.26.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

Typemill before version 2.26.0 has an authorization bypass flaw in the media file download feature. Unauthenticated attackers can exploit path-equivalent URL variants like dot-slash prefixes, double slashes, or percent-encoded sequences to bypass role-based access controls. The filesystem still resolves these requests to restricted files, allowing unauthorized downloads without credentials.

Detection Guidance

Check Typemill installations for version 2.26.0 or earlier. Test file access by attempting to download restricted files using path variations like ../, //, or percent-encoded sequences. Monitor web server logs for unusual file download requests with these patterns.

Impact Analysis

Attackers could access sensitive files stored in Typemill instances, including private media, documents, or other restricted content. This may lead to data leaks, intellectual property theft, or unauthorized access to confidential information depending on the exposed files.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by enabling unauthorized access to personal or health data. Organizations may face legal penalties, data breach notifications, and reputational damage if sensitive data is exposed due to this flaw.

Mitigation Strategies

Upgrade Typemill to version 2.26.0 or later immediately. Review and restrict file access permissions. Implement strict input validation for file paths. Add authentication checks for media file downloads. Monitor for unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-71518. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70