Which versions of Open Notebook are affected by CVE-2026-33589?

Open Notebook v1.8.3 contains a path traversal vulnerability in its file upload feature that allows unauthenticated attackers to read arbitrary files from the Docker container filesystem, including…

How to fix or mitigate CVE-2026-33589?

Within 24 hours: Identify all systems running Open Notebook v1.8.3 and isolate affected instances from production networks if feasible; document affected asset inventory. Within 7 days: Implement network-level access controls restricting file upload functionality to authorized users only; review container logs for suspicious file access patterns; rotate all secrets and credentials potentially exposed on affected systems. Within 30 days: Upgrade to Open Notebook v1.8.4 or later (if released); if no patched version exists, evaluate alternative file management solutions or decommission the affected instances.

Open Notebook CVE-2026-33589

Q: What is the CVSS score of CVE-2026-33589?

CVE-2026-33589 has a CVSS 4.0 base score of 8.2 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-28348 HIGH

Improper Input Validation (CWE-20)

2026-05-07 ENISA

GHSA-xfv3-v32f-xwfc

Docker File Upload Path Traversal

8.2

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 07, 2026 - 11:31 vuln.today

CVSS changed

May 07, 2026 - 11:22 NVD

8.2 (HIGH)

CVE Published

May 07, 2026 - 10:31 nvd

HIGH 8.2

DescriptionCVE.org

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker container via path traversal.

AnalysisAI

Path traversal in Open Notebook v1.8.3's file upload functionality allows unauthenticated local users to read arbitrary files from the Docker container filesystem. The vulnerability stems from insufficient input validation, enabling attackers to bypass directory restrictions and access sensitive container files including configuration data, environment variables, and application secrets. CVSS 8.2 (High severity) reflects substantial confidentiality impact across system and container scopes, though no public exploit code or active exploitation has been identified at time of analysis.

Technical ContextAI

Open Notebook is a note-taking application deployed in Docker containers. The vulnerability resides in the file upload handler which fails to sanitize user-supplied file paths (CWE-20: Improper Input Validation). Path traversal attacks exploit this weakness using directory traversal sequences (../, absolute paths, or encoded variants) to escape intended upload directories. In containerized environments, successful exploitation can expose container-specific resources like /proc/self/environ, application configuration files, database credentials, and mounted secrets. The CVSS vector indicates local attack surface (AV:L) with no authentication barrier (PR:N), suggesting the vulnerable endpoint is accessible to users with local container access or application-level permissions.

RemediationAI

Upgrade Open Notebook to a patched version addressing GHSA-842v-h4cj-r646 per the GitHub security advisory at https://github.com/lfnovo/open-notebook/security/advisories/GHSA-842v-h4cj-r646. The advisory should specify the exact fix version, which is not independently confirmed from available data. Until patching, implement strict input validation on all file upload paths using allowlist-based approaches: canonicalize file paths, reject traversal sequences (../, .\, encoded variants), restrict uploads to dedicated directories with chroot-like containment, and verify resolved paths remain within intended boundaries. In Docker deployments, reduce blast radius by running containers with read-only root filesystems where feasible (trade-off: breaks applications requiring write access to system directories), minimizing mounted volumes, using non-root container users, and isolating secrets into ephemeral volumes unmounted after application initialization (trade-off: complicates secret rotation). Network segmentation preventing lateral container access mitigates scope escalation shown in CVSS SC:H metric.