PT-2026-28161 · Saloon · Saloon

Huajihd

·

Published

2026-03-25

·

Updated

2026-03-26

·

CVE-2026-33183

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Saloon versions prior to 4.0.0
Description Saloon is a PHP library used for building API integrations and SDKs. Prior to version 4.0.0, the library lacked validation when constructing file paths from fixture names. This allowed names containing path segments, such as ../traversal or ../../etc/passwd, to create paths outside the intended fixture directory. Consequently, reading or writing fixtures could lead to unauthorized file access or modification anywhere the process had permissions. If the fixture name originated from user-controlled input, such as request parameters or configuration settings, this constituted a path traversal issue. The fix implemented in version 4.0.0 introduces validation in the fixture layer, rejecting names with characters like /, ``, .., or null bytes, and restricting the character set to safe options. Additionally, a defense-in-depth mechanism was added to the storage layer to ensure resolved paths remain within the base directory before any read or write operation.
Recommendations Upgrade to Saloon version 4.0.0 or later.

Exploit

Fix

Path traversal

Memory Corruption

Out of bounds Read

Weakness Enumeration

Related Identifiers

CVE-2026-33183
GHSA-F7XC-5852-FJ99

Affected Products

Saloon