EUVD-2026-56041
GHSA-xj74-834m-p9pc
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-accessible endpoint with no auth required by default; C:H for unrestricted directory enumeration; no integrity or availability impact applies.
Primary rating from Vendor (TuranSec).
CVSS VectorVendor: TuranSec
Lifecycle Timeline
2DescriptionCVE.org
A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint. The endpoint accepts an absolute filesystem path parameter and returns a directory listing without authentication, as WIKI_AUTH_MODE defaults to false. An attacker can enumerate sensitive directory contents on the host system.
AnalysisAI
Unauthenticated remote directory listing in deepwiki-open through commit 16f35a0 allows any network-accessible attacker to enumerate arbitrary filesystem paths on the host by supplying absolute path parameters to the local-repository structure endpoint. The root cause is a combination of missing input path restriction (CWE-22) and an authentication layer that is disabled by default (WIKI_AUTH_MODE=false), meaning every default deployment is immediately vulnerable without any configuration change. No public exploit has been identified at time of analysis, but the zero-authentication, low-complexity attack surface makes this trivially exploitable against any internet-exposed instance.
Technical ContextAI
deepwiki-open is an open-source AI-powered documentation generation tool by AsyncFuncAI (CPE: cpe:2.3:a:asyncfuncai:deepwiki-open:*:*:*:*:*:*:*:*) that renders wiki-style content from local code repositories. The vulnerability stems from a local-repository structure API endpoint that accepts a user-supplied absolute filesystem path and resolves it directly against the host OS filesystem without sanitizing or restricting the path to an allowed root directory - a textbook CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). Critically, the application's authentication gate (WIKI_AUTH_MODE) defaults to false, meaning no credential check is applied to this endpoint in standard deployments. An attacker can therefore request listings of arbitrary directories such as /etc, /home, or /var without supplying any token or session credential.
RemediationAI
No vendor-released patch has been independently confirmed at time of analysis - the sole reference points to the upstream repository at https://github.com/AsyncFuncAI/deepwiki-open with no tagged release or advisory identifying a fix commit beyond 16f35a0. As an immediate compensating control, administrators must explicitly set WIKI_AUTH_MODE to true in the application configuration to enforce authentication on all endpoints including the vulnerable local-repository structure endpoint; this is the highest-priority action and closes the unauthenticated access vector, though it will restrict anonymous wiki access if that is an intended use case. If the local-repository structure endpoint is not operationally required, block it at the reverse proxy layer by matching its specific URL path pattern and returning 403 or 404, which eliminates the attack surface without requiring an application restart. Regardless of auth configuration, deepwiki-open instances should not be directly internet-exposed; restrict network access to trusted internal segments or VPN-only ranges to reduce exposure to opportunistic scanning. Monitor the upstream GitHub repository for a patched release and apply it as soon as one is available.
More in Deepwiki Open
View allArbitrary file write and delete as root in AsyncFuncAI DeepWiki-Open (through commit 16f35a0) lets unauthenticated remot
Unauthenticated arbitrary file read in DeepWiki-Open (AsyncFuncAI) through commit d92819a lets anyone who can reach the
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today