What is the CVSS score of CVE-2026-25732?

CVE-2026-25732 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Python are affected by CVE-2026-25732?

NiceGUI applications using the FileUpload feature are vulnerable to path traversal attacks that could allow attackers to write files outside intended directories, potentially compromising application…. A patch is available.

Is there a public PoC exploit available for CVE-2026-25732?

Yes, a public proof-of-concept exploit is available for CVE-2026-25732. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-25732?

Within 24 hours: Inventory all applications using NiceGUI and identify those with FileUpload functionality; assess exposure level based on whether uploads are from trusted or untrusted sources. Within 7 days: Apply NiceGUI patch 3.7.0 or later to all affected systems; conduct code review for any custom filename handling logic that may be vulnerable. Within 30 days: Implement input validation testing in CI/CD pipeline and conduct penetration testing on patched file upload endpoints to verify remediation.

Python CVE-2026-25732

HIGH

Path Traversal (CWE-22)

2026-02-06 security-advisories@github.com

GHSA-9ffm-fxg3-xrhh

RCE Python Path Traversal Nicegui Zauberzeug

7.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 20, 2026 - 15:44 vuln.today

Public exploit code

Patch released

Feb 20, 2026 - 15:44 nvd

Patch available

CVE Published

Feb 06, 2026 - 22:16 nvd

HIGH 7.5

DescriptionGitHub Advisory

NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal when developers use the pattern UPLOAD_DIR / file.name. Malicious filenames containing ../ sequences allow attackers to write files outside intended directories, with potential for remote code execution through application file overwrites in vulnerable deployment patterns. This design creates a prevalent security footgun affecting applications following common community patterns. Note: Exploitation requires application code incorporating file.name into filesystem paths without sanitization. Applications using fixed paths, generated filenames, or explicit sanitization are not affected. This vulnerability is fixed in 3.7.0.

AnalysisAI

Path traversal in NiceGUI before 3.7.0 allows remote attackers to write arbitrary files outside intended directories by exploiting unsanitized filename metadata in the FileUpload.name property, potentially leading to remote code execution when developers incorporate this value directly into file paths. Public exploit code exists for this vulnerability, affecting applications using common patterns like concatenating user-supplied filenames with upload directories. Developers are only protected if they use fixed paths, generate filenames server-side, or explicitly sanitize user input.

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects Nicegui. NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal when developers use the pattern UPLOAD_DIR / file.name. Malicious filenames containing ../ sequences allow attackers to write files outside intended directories, with potential for remote code execution through application file overwrites in vulnerable deployment patterns. This design creates a prevalent security footgu

RemediationAI

A vendor patch is available — apply it immediately. Fixed in version 3.7.0.. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.