CVE-2026-92812

Name of the Vulnerable Software and Affected Versions decap-server (affected versions not specified)

Description A path traversal issue exists in the local proxy containment guard. The system employs plain string prefix comparison without validating path separators, allowing attackers to access sibling directories that start with the repository directory name. This can lead to unauthorized reading, writing, or deleting of files outside the intended repository root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.