PT-2026-29810 · Rack+3 · Rack+3

Haruki0409 · Published 2026-04-02 · Updated 2026-05-13 · CVE-2026-34763

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.23, 3.1.21, and 3.2.6

Description Rack::Directory interpolates the configured root path directly into a regular expression when deriving the displayed directory path. If the root path contains regex metacharacters such as +, *, or ., the prefix stripping can fail, and the generated directory listing may expose the full filesystem path in the HTML output. This can expose internal deployment details such as directory layout, usernames, mount points, or naming conventions. The issue occurs because the configured path is inserted directly into a regular expression without escaping.

Recommendations Update to Rack version 2.2.23 or later. Update to Rack version 3.1.21 or later. Update to Rack version 3.2.6 or later.

Exploit

Fix

Weakness Enumeration

CWE-625

Related Identifiers

BDU:2026-07727

CVE-2026-34763

GHSA-7MQQ-6CF9-V2QP

OPENSUSE-SU-2026:10508-1

USN-8182-1

Affected Products

Linuxmint

Rack

Red Os

Ubuntu

References · 39

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34763.yml · Exploit
• https://github.com/rack/rack/security/advisories/GHSA-7mqq-6cf9-v2qp · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34230 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-32762 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34786 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-34763 · Security Note
• https://ubuntu.com/security/CVE-2026-34831 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34835 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7mqq-6cf9-v2qp · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07727 · Security Note
• https://ubuntu.com/security/CVE-2026-34826 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34785 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-34763 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34763 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8182-1 · Vendor Advisory