PT-2026-98206 · Volotat · Anagnorisis

·

CVE-2026-97232

·

Published

2026-09-24

·

Updated

2026-09-24

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions prior to 0.4.3
Description A path traversal issue exists that can be triggered remotely. The flaw is located within the get file content(), save file content(), move files(), and start streaming() functions of the page.html file. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the get file content(), save file content(), move files(), and start streaming() functions within the page.html file.

Exploit

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-97232

Affected Products

Anagnorisis