PT-2026-43464 · Avideo · Avideo

Pr3Ungdt · Published 2026-05-18 · Updated 2026-05-29 · CVE-2026-45731

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions AVideo versions 29.0 and earlier

Description An issue exists in the 'view/update.php' endpoint where the updateFile parameter is processed as a relative path under the 'updatedb/' directory and passed to the PHP file() function for line-by-line execution during database migrations. Because the updateFile variable is concatenated into a path without sanitization, an authenticated administrator can use path traversal to read arbitrary text files accessible by the web-server process, such as '/etc/passwd' or '.env' files.

Recommendations Update AVideo to a version later than 29.0. As a temporary workaround, restrict access to the 'view/update.php' endpoint to only the most trusted administrators.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-45731

GHSA-3MJV-375J-6H92

Affected Products

Avideo

References · 4

• 🔥 https://github.com/WWBN/AVideo/security/advisories/GHSA-3mjv-375j-6h92 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-45731 · Security Note
• https://osv.dev/vulnerability/GHSA-3mjv-375j-6h92 · Vendor Advisory
• https://github.com/WWBN/AVideo · Note