CVE-2026-7784

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-7784

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7784.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-7784

Published

2026-05-04T23:30:15.477Z

Modified

2026-07-08T08:15:42.958362383Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal

Details

A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown processing of the file apiserver/routes/extensions.py of the component Skills Endpoint. Such manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7784.json",
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "5.0"
                },
                {
                    "last_affected": "5.0"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/rtgs2017/nagaagent

Affected ranges

Type

GIT

Repo

https://github.com/rtgs2017/nagaagent

Events

Introduced

f05b6d8f77a408bfaa0547acdb999a27413076d2

Last affected

f05b6d8f77a408bfaa0547acdb999a27413076d2

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        }
    ]
}

Affected versions

5.*

5.1.0

v5.*

v5.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7784.json"