CVE-2026-100372

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-#197

Description A path traversal issue exists in the admin template editor. Authenticated administrators with manage template access permission can use directory traversal sequences in the folder parameter to access locations outside the layout directory. This allows the modification of executable PHP files, potentially leading to remote code execution as the web server user.

Recommendations Update to version 5.5.3-#197 or later.