CVE-2026-25559

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-25559
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25559.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-25559
Published
2026-06-08T16:52:35.917Z
Modified
2026-07-16T03:31:16.714499924Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint
Details

OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and delete operations by supplying unsanitized absolute paths to the upload handler and wordlist functions. Attackers can chain the file write and delete primitives to achieve remote code execution by manipulating critical system files such as /etc/passwd, with full system impact since the application runs as root by default.

Database specific 
{
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25559.json",
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/openbullet/openbullet2

Affected ranges

Type
GIT
Repo
https://github.com/openbullet/openbullet2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71654a9b19d236df7123589296d2822ad1c08685
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.3.2"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.1.0
0.1.1
0.1.10
0.1.11
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.2
0.1.20
0.1.21
0.1.22
0.1.23
0.1.24
0.1.25
0.1.26
0.1.27
0.1.28
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.3.0
0.3.0.2586
0.3.1
0.3.1.2631
0.3.1.2637
0.3.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-25559.json"