PT-2026-5723 · Unknown · Openlist Frontend

A7Um + 2 · Published 2026-02-02 · Updated 2026-02-23 · CVE-2026-25059

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenList Frontend versions prior to 4.1.10

Description The OpenList Frontend application contains a path traversal flaw in multiple file operation handlers within the server/handles/fsmanage.go file. The application directly concatenates filename components from the req.Names variable with validated directories using stdpath.Join, allowing attackers to bypass path restrictions using ".." sequences. This enables authenticated attackers to access files belonging to other users within the same storage mount and perform unauthorized actions, including deletion, renaming, and copying. The vulnerable functions include FsRemove and FsCopy. An attacker can exploit this by injecting traversal sequences into filename components. The vulnerability allows privilege escalation within shared storage environments.

Recommendations Versions prior to 4.1.10: Upgrade to version 4.1.10 or later to resolve this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-25059

GHSA-QMJ2-8R24-XXCQ

GO-2026-4396

SUSE-SU-2026:0403-1

Affected Products

Openlist Frontend

References · 94

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25059.json · Exploit
• https://github.com/OpenListTeam/OpenList/commit/7b78fed106382430c69ef351d43f5d09928fff14 · Patch
• https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-qmj2-8r24-xxcq · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0403-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qmj2-8r24-xxcq · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25059 · Security Note
• https://osv.dev/vulnerability/GO-2026-4396 · Vendor Advisory
• https://github.com/OpenListTeam/OpenList/blob/5db2172ed681346b69ed468c73c1f01b6ed455ea/server/handles/fsmanage.go#L163-L164 · Note
• https://github.com/OpenListTeam/OpenList · Note
• https://github.com/OpenListTeam/OpenList/blob/5db2172ed681346b69ed468c73c1f01b6ed455ea/server/handles/fsmanage.go#L284-L285 · Note
• https://github.com/OpenListTeam/OpenList/releases/tag/v4.1.10 · Note
• https://suse.com/security/cve/CVE-2026-0798 · Note
• https://suse.com/security/cve/CVE-2026-23953 · Note
• https://suse.com/security/cve/CVE-2026-20888 · Note