High severity7.2NVD Advisory· Published Sep 30, 2019· Updated Jun 17, 2026

CVE-2019-17050

Description

An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Laravel/Voyager packagedescription
Laravel/Voyagerllm-create
Range: <=1.2.7
The Control Group/Voyagerllm-fuzzy
Range: <=1.2.7
Thecontrolgroup/Voyager
cpe:2.3:a:thecontrolgroup:voyager:*:*:*:*:*:laravel:*:*
Range: <=1.2.7

Patches

Vulnerability mechanics

References

github.com/the-control-group/voyager/issues/4322nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000