CVE-2026-97365

Deferred Deferred - Pending Action

Path Traversal in Littrs Application

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: VulDB

Description

A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-24

Generated

2026-09-25

AI Q&A

2026-09-25

EPSS Evaluated

N/A

NVD

CVE-2026-97365

Affected Vendors & Products

Vendor	Product	Version / Range
chonkie-inc	littrs	0.6.1
chonkie-inc	littrs	0.6.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in the chonkie-inc littrs 0.6.1/0.6.2 software. It exists in the Sandbox::mount function of the file crates/littrs/src/lib.rs. The flaw allows manipulation of the relative argument, which can be exploited remotely to traverse file paths beyond intended boundaries.

Impact Analysis

An attacker could exploit this to access unauthorized files or directories on the system where the software runs. This may lead to data leakage, unauthorized modifications, or further attacks depending on the system's configuration and permissions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Compliance may be compromised if the affected system handles regulated data.

Mitigation Strategies

Immediately update or patch the chonkie-inc littrs software to a version that addresses the path traversal vulnerability in the Sandbox::mount function. If no patch is available, consider disabling or removing the affected software from your systems.

Hi! I’m here to help you understand CVE-2026-97365. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70