PT-2026-5723 · Unknown · Openlist Frontend

A7Um + 2 · Publicado 2026-02-02 · Atualizado 2026-02-23 · CVE-2026-25059

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenList Frontend versions prior to 4.1.10

Description The OpenList Frontend application contains a path traversal flaw in multiple file operation handlers within the server/handles/fsmanage.go file. The application directly concatenates filename components from the req.Names variable with validated directories using stdpath.Join, allowing attackers to bypass path restrictions using ".." sequences. This enables authenticated attackers to access files belonging to other users within the same storage mount and perform unauthorized actions, including deletion, renaming, and copying. The vulnerable functions include FsRemove and FsCopy. An attacker can exploit this by injecting traversal sequences into filename components. The vulnerability allows privilege escalation within shared storage environments.

Recommendations Versions prior to 4.1.10: Upgrade to version 4.1.10 or later to resolve this issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-25059

GHSA-QMJ2-8R24-XXCQ

GO-2026-4396

SUSE-SU-2026:0403-1

Produtos afetados

Openlist Frontend

Referências · 94

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25059.json · Exploit
• https://github.com/OpenListTeam/OpenList/commit/7b78fed106382430c69ef351d43f5d09928fff14 · Correção
• https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-qmj2-8r24-xxcq · Aviso do Fabricante
• https://github.com/OpenListTeam/OpenList/blob/5db2172ed681346b69ed468c73c1f01b6ed455ea/server/handles/fsmanage.go#L163-L164 · Nota
• https://github.com/OpenListTeam/OpenList · Nota
• https://github.com/OpenListTeam/OpenList/blob/5db2172ed681346b69ed468c73c1f01b6ed455ea/server/handles/fsmanage.go#L284-L285 · Nota
• https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.10 · Nota
• https://suse.com/security/cve/CVE-2026-0798 · Nota
• https://suse.com/security/cve/CVE-2026-23953 · Nota
• https://suse.com/security/cve/CVE-2026-20888 · Nota
• https://suse.com/security/cve/CVE-2026-23850 · Nota
• https://suse.com/security/cve/CVE-2026-23831 · Nota
• https://suse.com/security/cve/CVE-2025-69199 · Nota
• https://suse.com/security/cve/CVE-2026-24843 · Nota
• https://suse.com/security/cve/CVE-2025-61732 · Nota