EUVD-2026-81013Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Local CLI processing of an attacker-supplied spec the victim must choose to split (AV:L/UI:R); no read impact (C:N) and only constrained file overwrite outside outDir (I:L/A:L).
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
3DescriptionCVE.org
Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir from untrusted OpenAPI or AsyncAPI component names and x-codeSamples lang values without verifying that the resolved target remains inside the selected directory. A description containing literal ../ traversal segments in those fields can cause the split command to place or overwrite files outside --outDir. Component data remains constrained to YAML or JSON, and code-sample filenames remain based on the HTTP method, so this is not an unrestricted arbitrary-content file write. This issue is fixed in @redocly/cli version 2.33.2.
AnalysisAI
Path traversal in the Redocly CLI split command (@redocly/cli prior to 2.33.2, and the 1.x line prior to 1.34.17) lets a crafted OpenAPI or AsyncAPI document place or overwrite YAML/JSON files outside the directory supplied to --outDir. The command derives output filenames from untrusted component names, path keys, and x-codeSamples lang values without confirming the resolved target stays inside the chosen directory, so literal ../ segments in those fields escape the output tree. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an operator to run the '@redocly/cli' split command with an --outDir against an attacker-controlled OpenAPI or AsyncAPI specification whose component names or x-codeSamples lang values contain literal '../' path-traversal segments. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but low-severity issue, and all available signals agree. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to @redocly/cli 2.33.2 (or later 2.x) if you are on the 2.x line, or to @redocly/cli 1.34.17 (or later) if you are pinned to 1.x - both are tagged releases referenced from the advisory at https://github.com/Redocly/redocly-cli/security/advisories/GHSA-657c-g7qc-r9j2, and the guardrail logic is visible in https://github.com/Redocly/redocly-cli/pull/2891 and https://github.com/Redocly/redocly-cli/pull/2923. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in TypeScript
View allPath traversal in decap-server's local proxy containment guard allows an unauthenticated attacker to read, write, or del
Unauthenticated access to the AgentOS HTTP server shipped in the npm `praisonai` package (versions 1.6.0 through 1.7.1)
Cross-tenant authorization bypass in TinaCMS self-hosted deployments allows any holder of a legitimate TinaCloud account
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependenc
Server-side request forgery in Nango through version 0.70.4 lets an authenticated user steer server-side HTTP requests t
Trigger.dev before 4.6.0 allows an authenticated low-privilege user to bind an arbitrary GitHub App installation to thei
Twenty CRM before 2.35.0 fails to enforce field- and row-level permission checks inside the groupBy-with-records GraphQL
Unauthenticated information disclosure in Rallly before 4.15.0 allows remote attackers who possess a poll's urlId to ret
SQL injection in the ORDER BY direction handling of MikroORM (a TypeScript ORM for Node.js) lets authenticated remote at
Cache-key pollution in the @orpc/server CORS plugin (oRPC versions prior to 1.14.8) allows remote, unauthenticated clien
Guest-level users on kan through 0.6.0 can create boards they are not entitled to create by invoking the GitHub project
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today