CVE-2026-115932

Name of the Vulnerable Software and Affected Versions Postiz (affected versions not specified)

Description Postiz fails to verify that media paths not formatted as web addresses are located within the designated upload directory. This allows a registered user to provide a crafted media path that enables the publishing worker to read arbitrary files from the server's disk and send them as attachments to an external Discord server. Additionally, two other routes allow for similar unconfined reads: one that confirms file existence and can lead to backend memory exhaustion, and another that delivers the file. Since self-registration is enabled by default, an attacker can create an account to exploit these issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.