VYPR
High severity8.8NVD Advisory· Published Oct 26, 2021· Updated Jun 17, 2026

CVE-2021-41185

CVE-2021-41185

Description

Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users may manually apply the changes from the fix commit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mycodo/Mycodollm-create
    Range: <8.12.7
  • kizniche/Mycodov5
    Range: < 8.12.7

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.