CVE-2026-100372

Received Received - Intake

Path Traversal in ClipBucket Admin Template Editor

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: VulnCheck

Description

ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-09-25

Generated

2026-09-26

AI Q&A

2026-09-26

EPSS Evaluated

N/A

NVD

CVE-2026-100372

Affected Vendors & Products

Vendor	Product	Version / Range
clipbucket	clipbucket	to 5.5.3-#197 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

ClipBucket v5 before 5.5.3-#197 has a path traversal flaw in the admin template editor. Authenticated administrators with the manage_template_access permission can use directory traversal sequences in the folder parameter to escape the intended layout directory and overwrite PHP files. This allows attackers to modify executable PHP files and potentially execute arbitrary code on the server as the web server user.

Detection Guidance

To detect this vulnerability, check for unauthorized PHP file modifications in directories outside the intended layout folder. Review server logs for suspicious admin template editor access with directory traversal sequences like '../' in the folder parameter. Look for unexpected changes in PHP files under web root directories.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain control of the web server by overwriting critical PHP files. This could lead to complete system compromise, data theft, unauthorized access to sensitive information, or disruption of services. The impact depends on the server's configuration and the permissions of the web server user.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate compliance requirements under GDPR (data protection), HIPAA (health information), or other regulations. Organizations could face legal penalties, reputational damage, and loss of trust if such breaches occur due to unpatched software.

Mitigation Strategies

Immediately update ClipBucket to version 5.5.3-#197 or later. Restrict access to the admin template editor to trusted administrators only. Audit all PHP files for unauthorized modifications and revert any suspicious changes. Implement file integrity monitoring to detect future unauthorized changes.

Hi! I’m here to help you understand CVE-2026-100372. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70