PT-2026-36888 · Unknown · Detect-It-Easy

Horsicq · Published 2026-05-04 · Updated 2026-05-29 · CVE-2026-43616

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Detect-It-Easy versions prior to 3.21

Description Insufficient path normalization during archive extraction allows attackers to write arbitrary files to the filesystem. By crafting malicious archive entries using absolute paths or relative traversal sequences, an attacker can write files outside the intended extraction directory. This can lead to persistent code execution if user startup scripts are overwritten.

Recommendations Update to version 3.21 or later.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-43616

Affected Products

Detect-It-Easy

References · 13

• https://github.com/horsicq/DIE-engine/commit/7fd300b926daf19707b2a36f0abe8b60a51308ee · Patch
• https://github.com/horsicq/DIE-engine/commit/cbbe1688e58ffd430d284bf65f336973f083db69 · Patch
• https://github.com/horsicq/DIE-engine/releases/tag/3.21 · Patch
• https://github.com/horsicq/Formats/commit/56cdf50ee3c72c56284e2819b23e98332842d259 · Patch
• https://github.com/horsicq/XArchive/commit/6a2aa84c2fd120b704f76bb5c5ee3e9b5a7a0fcc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43616 · Security Note
• https://github.com/horsicq/Detect-It-Easy · Note
• https://t.me/cveNotify/165179 · Telegram Post
• https://twitter.com/dailycve/status/2060391134304546873 · Twitter Post
• https://twitter.com/CVEnew/status/2051361258666860960 · Twitter Post
• https://t.me/CVEtracker/52653 · Telegram Post
• https://vulncheck.com/advisories/detect-it-easy-path-traversal-arbitrary-file-write · Note
• https://twitter.com/VulmonFeeds/status/2051370374571364691 · Twitter Post