CVE-2026-82460

Name of the Vulnerable Software and Affected Versions Cloud Commander versions prior to 19.20.2

Description An issue exists in the REST file-operation and markdown endpoints due to improper validation of path normalization. This allows attackers to use path traversal sequences—a technique used to access files and directories that are stored outside the web root folder—to read, write, move, or copy files outside the configured root directory.

Recommendations Update to version 19.20.2 or later.