EUVD-2026-12069Severity by source
AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
Primary rating from GitHub Advisory.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
Lifecycle Timeline
4DescriptionGitHub Advisory
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to 9.5.0, a path traversal vulnerability in the RocketBook (.rb) input plugin (src/calibre/ebooks/rb/reader.py) allows an attacker to write arbitrary files to any path writable by the calibre process when a user opens or converts a crafted .rb file. This is the same bug class fixed in CVE-2026-26065 for the PDB readers, but the fix was never applied to the RB reader. This vulnerability is fixed in 9.5.0.
AnalysisAI
Arbitrary file write vulnerability in Calibre's RocketBook input plugin enables attackers to write files to any location accessible by the Calibre process when a user opens or converts a malicious .rb file. The path traversal flaw affects versions prior to 9.5.0 and represents an unpatched instance of the same vulnerability class previously fixed in the PDB reader component. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Vulnerability AssessmentAI
| Risk Assessment | The CVSS v3.1 score of 5.0 reflects a Medium severity rating with a local attack vector (AV:L), low attack complexity (AC:L), no privilege requirement (PR:N), and user interaction required (UI:R). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a malicious RocketBook (.rb) file containing path traversal sequences in file metadata or internal path references, such as '../../../etc/cron.d/malicious_task' or '../../.calibre/plugins/malware.py'. The attacker then distributes this file via email, a file-sharing platform, or e-book repository, claiming it contains legitimate content. … |
| Remediation | Users should immediately upgrade calibre to version 9.5.0 or later, which includes the fix for the path traversal vulnerability in the RocketBook plugin. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Vendor StatusVendor
SUSE
Severity: HighShare
External POC / Exploit Code
Leaving vuln.today