EUVD-2026-85402
GHSA-px35-hw6v-gpf7
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as any domain owner
-
DeliverySend method=compress to /filemanager/controller
-
ExploitInject absolute/traversal paths in listOfFiles
-
ExecutionBackend appends paths to zip/tar as externalApp
-
ImpactDownload archive to disclose arbitrary files
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires an authenticated CyberPanel account that owns at least one configured domain (PR:L); the attacker then issues a method=compress request to the /filemanager/controller endpoint supplying attacker-controlled listOfFiles (absolute or out-of-scope/traversal paths), basePath, and compressedFileName. The application enforces only domain-ownership and does not canonicalize or confine paths to the authorized site directory. Exploitation is limited to files readable by the website's externalApp OS user and to disclosure only - no write, code execution, or availability impact. Specific to CyberPanel v1.9.1; no user interaction and no non-default configuration required beyond having a domain-owning login. |
| Impact | This is a genuine but moderate-severity issue best treated as a defense-in-depth / hardening priority rather than an emergency. The provided CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5) is internally consistent: network-reachable, low complexity, but requires authentication (PR:L) - specifically ownership of at least one configured domain - and yields confidentiality impact only (C:H), with no integrity or availability effect. No EPSS score, no CISA KEV listing, and no confirmed exploit code were supplied, so there is no evidence of active or automated exploitation. The main risk is arbitrary file disclosure within the reach of the website's externalApp OS user (which on a multi-tenant hosting panel can expose other sites' source, configs, and secrets), but the authentication requirement and confidentiality-only impact keep real-world urgency below that of an unauthenticated RCE. Note the CPE string is a placeholder ('cpe:2.3:a:n/a:n/a:*') and CWE is N/A, so affected-product enumeration is not machine-verifiable from the feed - the affected product/version (CyberPanel v1.9.1) is established only from the description and the GitHub source references. |
| Exploit ScenarioDerived | An attacker who controls (or has signed up for) any single domain on a shared CyberPanel v1.9.1 host authenticates to the file manager and sends a method=compress request to /filemanager/controller with absolute or ../-style paths in the listOfFiles JSON array plus attacker-chosen basePath and compressedFileName. The backend, validating only domain ownership, appends the paths to a zip/tar command run as the website's externalApp user, producing an archive that the attacker downloads to read arbitrary readable files (e.g. other tenants' files, config secrets). A third-party writeup (TraceLoom) is referenced, but no weaponized exploit code is confirmed in the provided data. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 23, 2026
Arbitrary file disclosure in CyberPanel v1.9.1 via a path traversal flaw in the file manager's compress method exposed at the /filemanager/controller endpoint, which lets an authenticated attacker who owns at least one configured domain package out-of-scope files into a downloadable zip/tar archive. The application checks only that the requester owns the referenced domain and never canonicalizes the attacker-supplied listOfFiles, basePath, or compressedFileName values, so absolute or traversal paths are appended to the archive command and executed as the site's externalApp OS user (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5). Impact is confidentiality-only and bounded by the file permissions of that per-site user, with no write, code execution, or availability effect; no public exploit identified at time of analysis, and this is best handled as a defense-in-depth/hardening priority rather than an emergency patch-now item.
RemediationAI
No vendor-released patch identified at time of analysis - every supplied reference points to the vulnerable v1.9.1 source (filemanager/views.py lines 101-143, filemanager/filemanager.py lines 23-27 and 378-406, CyberCP/secMiddleware.py lines 70-71) rather than to an upstream fix commit or fixed tag, so confirm a patched build directly with the CyberPanel maintainers before assuming an upgrade resolves it. Until a fixed release is verified, prioritize containment: audit panel accounts and revoke login rights from any user who does not strictly need them, since the flaw requires an authenticated domain-owning account (PR:L) and removing that prerequisite removes the exposure entirely; if the file manager's compress action is not operationally required, block method=compress requests to /filemanager/controller at the reverse proxy or WAF (trade-off: legitimate archive creation by admins stops), or add a rule rejecting any request whose listOfFiles or basePath contains absolute paths or '../' sequences, accepting that the parameter is JSON and therefore needs body inspection rather than simple URI matching. Harden the per-site isolation user: ensure the externalApp account for each hosted site cannot read other sites' document roots, panel configuration files, database credential stores, /etc/passwd-adjacent data, or its own hosting account's secrets, and consider running sites under an SELinux/AppArmor profile confining them to their own directory tree - the trade-off is possible breakage of legitimate site scripts that read shared paths. Finally, watch for compress requests with absolute listOfFiles values whose generated archives are immediately downloaded, which is the strongest detection signal given the read-only, confidentiality-only impact (C:H/I:N/A:N) and the absence of any integrity or availability side effects.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CyberPanel is a Django-based (Python) web hosting control panel that brokers per-site operations through shell commands, and its filemanager module is the component at fault here. The vulnerable code path is in filemanager/views.py (lines 101-143) and filemanager/filemanager.py (lines 23-27 and 378-406): the compress method takes the JSON properties listOfFiles, basePath, and compressedFileName straight from the request and interpolates them into a zip/tar command line rather than resolving them against a fixed site root. CyberCP/secMiddleware.py (lines 70-71) shows the only authorization gate applied - domain-ownership verification - which confirms that containment, not access control, is the missing control. The root cause class is path traversal / improper limitation of a pathname to a restricted directory (CWE-22), with an associated argument-injection surface (CWE-78) because untrusted path strings reach a shell command; the practical consequence in this case is read-only exfiltration of files readable by the website's externalApp user, since the archive is written to an attacker-chosen compressedFileName and then retrieved through the same file manager. No CPE string was supplied in the feed (the entry is the placeholder cpe:2.3:a:n/a:n/a), so version scoping rests on the upstream references, which all point at the v1.9.1 source tag.
Know when Python gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network-reachable file-manager endpoint, low complexity, needs a domain-owning authenticated account (PR:L); arbitrary file read gives C:H with no integrity or availability impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
DescriptionCVE.org
CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply absolute or otherwise out-of-scope file paths in the listOfFiles JSON property, together with attacker-controlled basePath and compressedFileName values, in a method=compress request. Because the application validates only domain ownership and does not canonicalize or restrict these paths to the authorized site directory, the backend appends them to zip or tar archive commands and executes them as the website externalApp user, allowing disclosure of arbitrary readable files through the generated archive.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Exploit-DB