CVE-2026-105125

Name of the Vulnerable Software and Affected Versions LaraDashboard versions prior to 1.4.8

Description A path traversal issue allows unauthenticated attackers to read JSON files by manipulating the {lang} route segment. On Windows hosts, attackers can use URL-encoded backslash sequences such as ..%5C to escape the resources/lang directory and access composer.json or other application JSON files. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update to version 1.4.8 or later.