PT-2026-53165 · Undefined · Undefined

Publicado 2026-06-28 · Atualizado 2026-06-28 · CVE-2026-13509

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload file/FileHandler.remove file of the file src/ragapp/backend/controllers/files.py of the component Knowledge File Handler. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-13509

Produtos afetados

Undefined

Referências · 8

• https://github.com/ragapp/ragapp/pull/294 · Nota
• https://github.com/ragapp/ragapp/issues/293 · Nota
• https://vuldb.com/cve/CVE-2026-13509 · Nota
• https://vuldb.com/vuln/374517/cti · Nota
• https://github.com/ragapp/ragapp · Nota
• https://vuldb.com/submit/838838 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13509 · Nota de Segurança
• https://vuldb.com/vuln/374517 · Nota