CVE-2026-97226

Name of the Vulnerable Software and Affected Versions DbGate versions prior to 7.2.6 DbGate versions prior to 7.3.2-premium-beta.1

Description A path traversal issue exists in the files-style endpoint. Remote attackers can manipulate the filePath/uri argument used by the fs.readFile() function within the packages/api/src/controllers/files.js file to access unauthorized files on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.