What is the CVSS score of CVE-2020-37041?

CVE-2020-37041 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.4%.

Which versions of Windows are affected by CVE-2020-37041?

OpenCTI instances running version 3.3.1 are exposed to unauthenticated file disclosure attacks that could leak sensitive configuration files, credentials, and intellectual property without…

Is there a public PoC exploit available for CVE-2020-37041?

Yes, a public proof-of-concept exploit is available for CVE-2020-37041. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2020-37041?

Within 24 hours: Identify all OpenCTI 3.3.1 deployments and restrict network access to the /static/css endpoint using firewall rules or WAF policies to authorized users only. Within 7 days: Deploy Web Application Firewall rules to block path traversal sequences (../, ..\ encoded variants) and implement input validation on all static file requests. Within 30 days: Upgrade to a patched version when available, or evaluate alternative threat intelligence platforms if upgrade is not feasible; conduct forensic review of access logs to determine if exploitation has occurred.

Windows CVE-2020-37041

HIGH

Path Traversal (CWE-22)

2026-01-30 disclosure@vulncheck.com

Windows Linux Path Traversal Opencti Citeum

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

PoC Detected

Feb 13, 2026 - 17:56 vuln.today

Public exploit code

CVE Published

Jan 30, 2026 - 23:16 nvd

HIGH 7.5

DescriptionCVE.org

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../../../../../etc/passwd returns the contents of /etc/passwd. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.

AnalysisAI

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects Opencti. OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../../../../../etc/passwd returns the contents of /etc/passwd. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.

RemediationAI

Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.