CVE-2026-103398

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-103398

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103398.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-103398

Published

2026-09-30T14:48:57Z

Modified

2026-10-02T03:46:59Z

Severity

8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path

Details

OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary directories outside configured save locations to read and write files through manifest and sync routes.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-73"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103398.json"
}

References

Affected packages

Git / github.com/liquid-co/opensave

Affected ranges

Type

GIT

Repo

https://github.com/liquid-co/opensave

Events

Introduced

Fixed

f9bb679b4a13403ed8c2c3f54cc99caa3f3a350b

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "2.4.0"
        },
        {
            "fixed":  "2.4.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

v2.*

v2.3.0

v2.3.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103398.json"