What is the CVSS score of CVE-2026-55469?

CVE-2026-55469 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2026-55469?

Yes, a patch is available for CVE-2026-55469. Update the affected software to the latest version immediately.

Snipe-IT CVE-2026-55469

EUVD-2026-43000 MEDIUM

Path Traversal (CWE-22)

2026-07-10 security-advisories@github.com

Path Traversal Snipe It

6.5

CVSS 3.1 · Vendor: github

Severity by source

Vendor (github) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

vuln.today AI

6.5 MEDIUM

Network vector via web interface; PR:H because both import and assets.update permissions must be held; no confidentiality impact as only deletion occurs.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (github).

CVSS VectorVendor: github

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 10, 2026 - 21:02 EUVD

Analysis Generated

Jul 10, 2026 - 20:44 vuln.today

DescriptionCVE.org

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user with import and assets.update permissions can place a path traversal string in an asset image field through CSV import and then trigger image deletion, allowing deletion of arbitrary files accessible to the server process. This issue is fixed in version 8.6.2.

AnalysisAI

Arbitrary file deletion in Snipe-IT prior to 8.6.2 allows an authenticated attacker holding both import and assets.update permissions to delete any file readable by the server process via a path traversal string injected into the asset image field during CSV import. The vulnerability is triggered in a two-stage pattern: first importing a crafted CSV, then invoking the image deletion action, which follows the unsanitized path without boundary checks. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate with import+assets.update account

Delivery

Craft CSV with path traversal in image field

Exploit

Submit CSV via import endpoint

Execution

Trigger asset image deletion action

Impact

Server deletes arbitrary targeted file

Access

Authenticate with import+assets.update account

Delivery

Craft CSV with path traversal in image field

Exploit

Submit CSV via import endpoint

Execution

Trigger asset image deletion action

Impact

Server deletes arbitrary targeted file

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated session with a Snipe-IT account that has been granted BOTH the import permission AND the assets.update permission - two distinct, administratively-assigned roles that must coexist on the same account. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS base score of 6.5 with vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H accurately reflects the threat profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker who controls a Snipe-IT account with both import and assets.update permissions prepares a CSV file containing a crafted asset image field value such as '../../var/www/snipe-it/.env' or another sensitive server path. After importing the CSV via the standard import interface, the attacker triggers the asset image deletion action on the affected record, causing the server to delete the targeted file outside the intended upload directory. …
Remediation	Upgrade Snipe-IT to version 8.6.2 or later, which contains the patch referenced in commit abc4363e8393b29a5566b8c50144426af72bbc97 (https://github.com/grokability/snipe-it/commit/abc4363e8393b29a5566b8c50144426af72bbc97). … Detailed patch versions, workarounds, and compensating controls in full report.