CVE-2026-115931

Name of the Vulnerable Software and Affected Versions Postiz (affected versions not specified)

Description Postiz allows signed-in users to request the backend to execute functions on connected channels without restricting which functions can be called. This allows users to trigger internal helper functions not intended for web interface access. One such helper enables the reading of arbitrary files from the server disk if a channel is connected using a file path as a token, potentially exposing environment variables, session signing secrets, database addresses, and service credentials. Additionally, another helper function can be used to force the backend process to exit, causing a denial of service. Since self-registration is enabled by default, these actions can be performed by any newly registered user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.