CVE-2026-11841

Name of the Vulnerable Software and Affected Versions AppEngine (affected versions not specified)

Description Improper access restrictions in the AppEngine Fileaccess over HTTP feature allow unauthenticated users to perform read and write operations on sensitive filesystem areas. This exposure includes device parameter files, which enables the modification of application settings and customer-defined passwords. Furthermore, access to the custom application directory may allow the execution of arbitrary Lua code within the sandboxed AppEngine environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.