CVE-2026-85688
Received Received - Intake

Unauthenticated File Read Write in TEN Framework

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious content to system paths, enabling code execution through authorized_keys, cron files, or executable graph files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-85688
EUVD
EUVD-2026-71137

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ten_framework ten_framework to 0.11.71 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

TEN Framework 0.11.71 has unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can use POST and PUT requests to /api/designer/v1/file-content to read any file or write malicious content to system paths. This could allow code execution via files like authorized_keys, cron jobs, or executable graph files.

Detection Guidance

Check for unauthorized POST or PUT requests to /api/designer/v1/file-content endpoints. Monitor logs for suspicious file read/write operations targeting sensitive paths like /root/.ssh/authorized_keys or /etc/cron.d/. Use network traffic analysis tools to detect unusual API calls to these endpoints.

Impact Analysis

An attacker could read sensitive files, modify system files, or execute arbitrary code on your system. This may lead to data breaches, system compromise, or unauthorized access. The high CVSS scores indicate severe potential impact.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules. Non-compliance risks include fines, legal action, and reputational damage due to data exposure or loss.

Mitigation Strategies

Immediately restrict access to /api/designer/v1/file-content endpoints via firewall rules or disable them if unused. Update TEN Framework to the latest version if a patch is available. Implement strict input validation and authentication for all API endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85688. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart