CVE-2026-90774

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-90774

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90774.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-90774

Published

2026-09-13T10:45:44Z

Modified

2026-10-28T02:31:00Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

rustypaste before 0.18.1 Path Traversal via filename header

Details

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to arbitrary locations.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90774.json"
}

References

Affected packages

Git / github.com/orhun/rustypaste

Affected ranges

Type

GIT

Repo

https://github.com/orhun/rustypaste

Events

Introduced

Fixed

71d0b5d001fb2ec041d95ca75b4eff18293e9f10

Fixed

ac05d552596af4a8429d80f30d11f67117ce02c8

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.18.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "ac05d552596af4a8429d80f30d11f67117ce02c8"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v0.*

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v0.10.0

v0.10.1

v0.11.0

v0.11.1

v0.12.0

v0.12.1

v0.13.0

v0.14.0

v0.14.1

v0.14.2

v0.14.3

v0.14.4

v0.15.0

v0.15.1

v0.16.0

v0.16.1

v0.17.0

v0.18.0

v0.2.0

v0.3.0

v0.3.1

v0.4.0

v0.4.1

v0.5.0

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.5

v0.7.0

v0.7.1

v0.8.0

v0.8.1

v0.8.2

v0.8.3

v0.8.4

v0.9.0

v0.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90774.json"