Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-100520 (GCVE-0-2026-100520)

Vulnerability from nvd – Published: 2026-09-26 00:59 – Updated: 2026-09-26 00:59

Title

Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

Summary

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files into other tenants' web roots and execute code as those tenants.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

VulnCheck mitre root

References

7 references

URL	Tags
https://github.com/crivion/laranode/security/advi…	vendor-advisory
https://github.com/crivion/laranode/pull/21	patchissue-tracking
https://github.com/crivion/laranode/commit/5c2b18…	patch
https://github.com/crivion/laranode/releases/tag/v1.2.1	release-notes
https://github.com/crivion/laranode/blob/v1.2/app…	technical-description
https://github.com/crivion/laranode	product
https://www.vulncheck.com/advisories/laranode-bef…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
crivion	Laranode	Affected: 0 , < 1.2.1 (semver)

Date Public

2026-09-21 00:00

Credits

Alisher Qarshibayev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Laranode",
          "programFiles": [
            "app/Actions/Filemanager/UploadFileAction.php",
            "routes/web.php"
          ],
          "repo": "https://github.com/crivion/laranode",
          "vendor": "crivion",
          "versions": [
            {
              "lessThan": "1.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alisher Qarshibayev"
        }
      ],
      "datePublic": "2026-09-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files into other tenants\u0027 web roots and execute code as those tenants."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-26T00:59:22.329Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-34h2-2696-vfvr)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/crivion/laranode/security/advisories/GHSA-34h2-2696-vfvr"
        },
        {
          "tags": [
            "patch",
            "issue-tracking"
          ],
          "url": "https://github.com/crivion/laranode/pull/21"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/crivion/laranode/commit/5c2b18ae99caf77a6fb6cc5c0ab66562bd673424"
        },
        {
          "name": "Laranode v1.2.1 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/crivion/laranode/releases/tag/v1.2.1"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/crivion/laranode/blob/v1.2/app/Actions/Filemanager/UploadFileAction.php"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/crivion/laranode"
        },
        {
          "name": "VulnCheck Advisory: Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/laranode-before-1.2.1-path-traversal-in-file-manager-upload-endpoint"
        }
      ],
      "title": "Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-100520",
    "datePublished": "2026-09-26T00:59:22.329Z",
    "dateReserved": "2026-09-26T00:48:14.697Z",
    "dateUpdated": "2026-09-26T00:59:22.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-100520 (GCVE-0-2026-100520)

Vulnerability from cvelistv5 – Published: 2026-09-26 00:59 – Updated: 2026-09-26 00:59

Title

Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

Summary

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files into other tenants' web roots and execute code as those tenants.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

VulnCheck mitre root

References

7 references

URL	Tags
https://github.com/crivion/laranode/security/advi…	vendor-advisory
https://github.com/crivion/laranode/pull/21	patchissue-tracking
https://github.com/crivion/laranode/commit/5c2b18…	patch
https://github.com/crivion/laranode/releases/tag/v1.2.1	release-notes
https://github.com/crivion/laranode/blob/v1.2/app…	technical-description
https://github.com/crivion/laranode	product
https://www.vulncheck.com/advisories/laranode-bef…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
crivion	Laranode	Affected: 0 , < 1.2.1 (semver)

Date Public

2026-09-21 00:00

Credits

Alisher Qarshibayev

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Laranode",
          "programFiles": [
            "app/Actions/Filemanager/UploadFileAction.php",
            "routes/web.php"
          ],
          "repo": "https://github.com/crivion/laranode",
          "vendor": "crivion",
          "versions": [
            {
              "lessThan": "1.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alisher Qarshibayev"
        }
      ],
      "datePublic": "2026-09-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files into other tenants\u0027 web roots and execute code as those tenants."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-26T00:59:22.329Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-34h2-2696-vfvr)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/crivion/laranode/security/advisories/GHSA-34h2-2696-vfvr"
        },
        {
          "tags": [
            "patch",
            "issue-tracking"
          ],
          "url": "https://github.com/crivion/laranode/pull/21"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/crivion/laranode/commit/5c2b18ae99caf77a6fb6cc5c0ab66562bd673424"
        },
        {
          "name": "Laranode v1.2.1 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/crivion/laranode/releases/tag/v1.2.1"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/crivion/laranode/blob/v1.2/app/Actions/Filemanager/UploadFileAction.php"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/crivion/laranode"
        },
        {
          "name": "VulnCheck Advisory: Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/laranode-before-1.2.1-path-traversal-in-file-manager-upload-endpoint"
        }
      ],
      "title": "Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-100520",
    "datePublished": "2026-09-26T00:59:22.329Z",
    "dateReserved": "2026-09-26T00:48:14.697Z",
    "dateUpdated": "2026-09-26T00:59:22.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

2 vulnerabilities found for Laranode by crivion

CVE-2026-100520 (GCVE-0-2026-100520)

CVE-2026-100520 (GCVE-0-2026-100520)