PT-2026-138430

CVE-2026-63663

Published

2026-11-06

Updated

2026-11-06

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CloudBeaver versions 23.2.3 through 26.1.1

Description A path traversal issue exists in the SQL result-editing functionality. This allows an authenticated user with SQL result-editing privileges to force the server to open files outside the designated temporary upload directory. In specific database value-handling scenarios, this can lead to the disclosure of local files that are readable by the CloudBeaver server process.

Recommendations Update to version 26.1.2.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers

CVE-2026-63663