Skip to main content

Ten Framework

1 CVEs product

Monthly

CVE-2026-85688 Sep 04, 14:32 CRITICAL Act Now

Unauthenticated arbitrary file read and write in TEN Framework 0.11.71 lets remote attackers hit the TMAN Designer file-content API (POST/PUT to /api/designer/v1/file-content) with no credentials, reading any file the service can access and writing attacker-controlled content to arbitrary system paths. Because the write primitive can drop SSH authorized_keys, cron jobs, or executable graph files, it escalates directly to remote code execution. Reported by VulnCheck; no public exploit identified at time of analysis and it is not in CISA KEV.

Authentication Bypass RCE Ten Framework
NVD GitHub
CVSS 4.0
9.3
EPSS
0.4%
EPSS 0% CVSS 9.3
CRITICAL Act Now

Unauthenticated arbitrary file read and write in TEN Framework 0.11.71 lets remote attackers hit the TMAN Designer file-content API (POST/PUT to /api/designer/v1/file-content) with no credentials, reading any file the service can access and writing attacker-controlled content to arbitrary system paths. Because the write primitive can drop SSH authorized_keys, cron jobs, or executable graph files, it escalates directly to remote code execution. Reported by VulnCheck; no public exploit identified at time of analysis and it is not in CISA KEV.

Authentication Bypass RCE Ten Framework
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy