What is the CVSS score of CVE-2026-25059?

CVE-2026-25059 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openlist are affected by CVE-2026-25059?

OpenList Frontend versions prior to 4.1.10 contain a critical path traversal vulnerability that could allow attackers to access, modify, or delete files on affected systems.. A patch is available.

Is there a public PoC exploit available for CVE-2026-25059?

Yes, a public proof-of-concept exploit is available for CVE-2026-25059. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-25059?

Within 24 hours: Identify all systems running OpenList Frontend versions prior to 4.1.10 and assess exposure. Within 7 days: Apply vendor patch to version 4.1.10 or later across all affected systems. Within 30 days: Conduct post-patch validation, review file access logs for suspicious activity, and document remediation completion.

Openlist CVE-2026-25059

HIGH

Path Traversal (CWE-22)

2026-02-02 security-advisories@github.com

GHSA-qmj2-8r24-xxcq

Path Traversal Openlist Suse

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

PoC Detected

Feb 23, 2026 - 17:35 vuln.today

Public exploit code

Patch released

Feb 23, 2026 - 17:35 nvd

Patch available

CVE Published

Feb 02, 2026 - 23:16 nvd

HIGH 8.8

DescriptionGitHub Advisory

OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in server/handles/fsmanage.go. Filename components in req.Names are directly concatenated with validated directories using stdpath.Join. This allows ".." sequences to bypass path restrictions, enabling users to access other users' files within the same storage mount and perform unauthorized actions such as deletion, renaming, or copying of files. An authenticated attacker can bypass directory-level authorisation by injecting traversal sequences into filename components, enabling unauthorised file removal and copying across user boundaries within the same storage mount. This vulnerability is fixed in 4.1.10.

AnalysisAI

OpenList Frontend versions prior to 4.1.10 contain a path traversal vulnerability in file operation handlers that allows authenticated users to bypass directory restrictions and access other users' files on the same storage mount. An attacker can exploit this by injecting ".." sequences into filename parameters to perform unauthorized file operations including deletion, renaming, and copying across user boundaries. Public exploit code exists for this vulnerability, which is resolved in version 4.1.10.

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects the multiple file operation component of Openlist. OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in server/handles/fsmanage.go. Filename components in req.Names are directly concatenated with validated directories using stdpath.Join. This allows ".." sequences to bypass path restrictions, enabling users to access other users' files within the same storage mount and perform unauthorized actions such as deletion, renaming, or copying of f

RemediationAI

A vendor patch is available — apply it immediately. Fixed in version 4.1.10.. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.