CVE-2026-105157

Name of the Vulnerable Software and Affected Versions RainyGao DocSys versions prior to 2.02.85

Description A path traversal issue exists in the Document Controller component. The DocController.doGetTmp() function, located in the /Doc/doGetTmpFile.do endpoint, fails to properly handle the path/fileName argument, allowing remote attackers to access files outside the intended directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /Doc/doGetTmpFile.do endpoint to minimize the risk of exploitation.